Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_65ec98d34d4f1b34b817d1b8b9c240e0.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
JaffaCakes118_65ec98d34d4f1b34b817d1b8b9c240e0.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_65ec98d34d4f1b34b817d1b8b9c240e0
-
Size
118KB
-
MD5
65ec98d34d4f1b34b817d1b8b9c240e0
-
SHA1
59f1b758a3a37e5d3e3a564d1b71b488c97c85e6
-
SHA256
5382021817e98d5cfa2728d9a50cfc7a2a91e63602a35d8a7473d971c225427d
-
SHA512
992ab34c3a61851ef0d32081e2481252f63aff6bb98ef6f8cc49ef16d4248b2c2057f8354c56971027af866d7cb9ea75e9a0490abe88bd63d28f8604f19ffd06
-
SSDEEP
3072:+FELU9oIQ6sgS8QQtzhbmiCR5jyRiNzPsY0e:d49oIumbrCR0RczPsY0e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_65ec98d34d4f1b34b817d1b8b9c240e0
Files
-
JaffaCakes118_65ec98d34d4f1b34b817d1b8b9c240e0.exe windows:4 windows x86 arch:x86
0dc7240843d34379976ebf6fd1b25010
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentDirectoryW
CreateMutexA
CloseHandle
FormatMessageA
GetModuleHandleA
GetLocalTime
SetFileTime
HeapCreate
FindResourceA
SetFileAttributesW
GetLastError
GetStartupInfoW
SetFileTime
ReadFile
lstrcpyA
IsBadStringPtrW
lstrcatA
LeaveCriticalSection
GetFileSize
InitializeCriticalSection
SetFileTime
msi
MsiCloseHandle
MsiAdvertiseProductA
MsiCreateRecord
MsiCloseAllHandles
user32
IsDialogMessageA
GetWindowLongW
GetWindowRect
SetFocus
GetWindowTextA
IsWindow
wsprintfW
DispatchMessageA
PostMessageW
IsZoomed
PeekMessageW
LoadCursorW
SetCursorPos
wldap32
ldap_add
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text1 Size: 1024B - Virtual size: 241B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 161B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE