Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_61c3ecb6cb9e8a072456f0d05f9b3f00.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_61c3ecb6cb9e8a072456f0d05f9b3f00.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_61c3ecb6cb9e8a072456f0d05f9b3f00
-
Size
125KB
-
MD5
61c3ecb6cb9e8a072456f0d05f9b3f00
-
SHA1
bec20366af3b69741a4386ecc6c832019d8ac5e2
-
SHA256
5783731db15e8cbff6d3c6e13975c6832a8744899d586b73cb74b5ef4ce7dd72
-
SHA512
722aea8fc15aabbcae00b534bd7d5602507e63bfb73157beafed2197944cf37d1d7f9eb34d834965729fe825e8ebfac4629f2321deec9eb32225757a8cca555c
-
SSDEEP
3072:60IZfNtjv4it38SbyxeNJ4VfeQV+c9n4mxfo8:YRNtjvtsWyM/9c94Kfo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_61c3ecb6cb9e8a072456f0d05f9b3f00
Files
-
JaffaCakes118_61c3ecb6cb9e8a072456f0d05f9b3f00.exe windows:5 windows x86 arch:x86
60ef972acc858d3bee2ee8a444c8fb6e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateEventA
HeapFree
SetLastError
DeviceIoControl
GetVersionExA
GetFileAttributesW
FindClose
GetCurrentThread
GetModuleHandleA
CloseHandle
RemoveDirectoryW
GetPrivateProfileIntA
GetFileAttributesW
CreateDirectoryW
GetCurrentProcess
GetStringTypeA
LocalFlags
VirtualProtectEx
GlobalLock
SetCommBreak
GetPrivateProfileSectionA
user32
SetCursorPos
SetFocus
wsprintfW
GetWindowLongW
GrayStringW
IsWindow
PostMessageW
DispatchMessageA
GetWindowTextW
PeekMessageW
LoadCursorW
IsDialogMessageA
IsZoomed
netshell
DllGetClassObject
DllRegisterServer
DllCanUnloadNow
HrCreateDesktopIcon
rasapi32
DwCloneEntry
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 392B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ