Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_6685d3c2a1a1c4aca8dd884b73af5290.exe
Resource
win7-20241023-en
General
-
Target
JaffaCakes118_6685d3c2a1a1c4aca8dd884b73af5290
-
Size
158KB
-
MD5
6685d3c2a1a1c4aca8dd884b73af5290
-
SHA1
8fca64977e4fe43ce6da66cad9e45f26226adef9
-
SHA256
840c9b9926a60e7c4efc340834d1680939c4daa50665c26298ce8cca43697c05
-
SHA512
c54edc80fceba5d8b63964af7f7b39b5f5e5ff54b39029960ab2758da0fe36ed209bec97eec9edeb5f2975683e7c7c30dcbabd0bcc874f8b192be5f5021d5779
-
SSDEEP
1536:yN6gJk0sKTaBAmpeWf1JOB67UXt2MZojGTmz5LH9LsS0KHNZQkMhOxN5EqHqbaG3:yNxyKT4pQBPlWjR3HNZFDxN5Eq4pGCH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_6685d3c2a1a1c4aca8dd884b73af5290
Files
-
JaffaCakes118_6685d3c2a1a1c4aca8dd884b73af5290.exe windows:5 windows x86 arch:x86
b74028f13797ec268b77416435f9dc66
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetCurrentProcess
TerminateProcess
GetProcessHeap
SetEndOfFile
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
GetStringTypeW
GetCurrentThreadId
LoadLibraryExW
GetModuleHandleW
LoadLibraryW
SetDllDirectoryA
GetProcAddress
SetEnvironmentVariableA
LoadLibraryExA
GetEnvironmentVariableA
GetComputerNameA
TerminateThread
CloseHandle
CreateThread
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
HeapAlloc
GetLastError
HeapFree
RaiseException
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapSize
ExitProcess
GetFileAttributesA
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
MultiByteToWideChar
ReadFile
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
SetStdHandle
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoA
GetStringTypeA
GetModuleHandleA
user32
GetMessageW
TranslateMessage
DispatchMessageW
PostThreadMessageA
psapi
GetModuleInformation
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
advapi32
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
Sections
.text Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
���Y�u$ Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE