Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_62da1b5b4fd64f170c7641c7eba5eac0.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_62da1b5b4fd64f170c7641c7eba5eac0.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_62da1b5b4fd64f170c7641c7eba5eac0
-
Size
121KB
-
MD5
62da1b5b4fd64f170c7641c7eba5eac0
-
SHA1
e8486fff5d662ae8ea96a529886af4e39a52b837
-
SHA256
226fd73df938011f2555d392befa63b57f3dd76b8b3aba6bceeb2efa7fbaab87
-
SHA512
9df724072561ea635c490cda073cef7f11ddb127685a73918042c49d6bc54a9337482e97d1f8e8b75437da484d2b5ab93efff8f185e52f6f171dab82320dd1b2
-
SSDEEP
3072:5E6zn05IqaYG4i41Zb4Chqf3krDIayFmn1SlyIHafDD:7ra9sf3kfIayFm1SUIHUDD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_62da1b5b4fd64f170c7641c7eba5eac0
Files
-
JaffaCakes118_62da1b5b4fd64f170c7641c7eba5eac0.exe windows:4 windows x86 arch:x86
fe55cbedb73ea37df90d09e731aad26d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FormatMessageW
GetModuleHandleW
IsBadWritePtr
GetModuleHandleA
InitializeCriticalSection
GetLastError
CreateMutexW
SetFileTime
HeapCreate
SetFileTime
lstrcatA
SetFileAttributesW
SetFileTime
lstrcpyA
CloseHandle
FindResourceA
GetStartupInfoW
GetFileSize
GetLocalTime
ReadFile
LeaveCriticalSection
msi
MsiCloseHandle
MsiCloseAllHandles
MsiCreateRecord
MsiAdvertiseProductA
user32
GetWindowRect
PostMessageW
wsprintfW
DispatchMessageA
SetCursorPos
IsDialogMessageA
IsZoomed
IsWindow
LoadCursorW
GetWindowLongW
SetFocus
GetWindowTextA
PeekMessageW
wldap32
ldap_add
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: 1KB - Virtual size: 193B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 129B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE