Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_63f9f5d2b56ac7b9a7ab764e4f9cb940.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_63f9f5d2b56ac7b9a7ab764e4f9cb940.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_63f9f5d2b56ac7b9a7ab764e4f9cb940
-
Size
134KB
-
MD5
63f9f5d2b56ac7b9a7ab764e4f9cb940
-
SHA1
00871f0d9239b801377508e45746923d43fc3dc3
-
SHA256
0ef3b0869ddc85301d1a011651294b79849092b37951d452e813a823a0274e9d
-
SHA512
f7237e991a05628f2f5d09996cc01992996ba113f22f99116a9d35684ff2ea6b6401440a63d7498274748e52ca9a4f13e452d56f6b63817b01b3bea2110240ff
-
SSDEEP
3072:My6EGc8E41UngTe2PXZ2lxB/pQGnYiWKQZL0VDRE0Y2M:f6EGc8E41UgTVZqxdRnY/KQZQVDW0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_63f9f5d2b56ac7b9a7ab764e4f9cb940
Files
-
JaffaCakes118_63f9f5d2b56ac7b9a7ab764e4f9cb940.exe windows:5 windows x86 arch:x86
bd9ebea91b7b8677228cfc04d50cf515
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeleteFileA
DeviceIoControl
HeapFree
CreateEventW
LoadLibraryW
SuspendThread
VirtualProtectEx
GetPrivateProfileSectionA
GetStringTypeW
GetCurrentThread
GetPrivateProfileIntW
lstrlenA
GetDriveTypeA
GetProcessVersion
TlsGetValue
DeviceIoControl
SetLastError
CreateEventW
FindAtomA
ResumeThread
GetProcessHeap
clbcatq
SetSetupSave
CheckMemoryGates
SetupOpen
SetupOpen
ComPlusMigrate
CheckMemoryGates
SetSetupSave
CheckMemoryGates
DllGetClassObject
DllGetClassObject
SetupOpen
ComPlusMigrate
ComPlusMigrate
pdh
PdhGetLogFileSize
PdhCloseLog
PdhAddCounterA
PdhGetLogFileTypeA
Sections
.text Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ