Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_6268a552e4f5a33a1088481157461460.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_6268a552e4f5a33a1088481157461460.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_6268a552e4f5a33a1088481157461460
-
Size
121KB
-
MD5
6268a552e4f5a33a1088481157461460
-
SHA1
99b6ed756594817b7439601e58cc707d73251adc
-
SHA256
5c088a68ff63070c112a25b0289fec84525bc96bcc1fdeae839f5d85bf91b8da
-
SHA512
50d34bb67dc6e492c48e4fa645f9430b1908ce3c7ccc301023772ec065b467034624b67f907f6a9f689c27b073cb027b54d8e4b4d4da5175482fee8fae186c04
-
SSDEEP
3072:GioV+gyyg4itEvVOSMbkFm7/y42jOdEabFJJPBv4gzZD:MVitEvVOSlm7CgPhJdBZD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_6268a552e4f5a33a1088481157461460
Files
-
JaffaCakes118_6268a552e4f5a33a1088481157461460.exe windows:4 windows x86 arch:x86
bf90c462d3a4530e8518f7d728b743dc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LeaveCriticalSection
lstrcatA
GetStartupInfoW
FormatMessageW
SetFileTime
CloseHandle
CreateMutexW
HeapCreate
IsBadWritePtr
SetFileTime
lstrcpyA
SetFileAttributesW
GetFileSize
InitializeCriticalSection
GetModuleHandleA
GetModuleHandleW
GetLastError
GetLocalTime
FindResourceA
SetFileTime
ReadFile
msi
MsiAdvertiseProductA
MsiCloseHandle
MsiCreateRecord
MsiCloseAllHandles
user32
IsDialogMessageA
DispatchMessageA
PostMessageW
SetCursorPos
PeekMessageW
GetWindowTextA
GetWindowLongW
GetWindowRect
SetFocus
wsprintfW
IsZoomed
LoadCursorW
IsWindow
wldap32
ldap_add
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: 1KB - Virtual size: 193B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 129B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE