Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_66eb141278dbcad938ea70ad5458c150.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_66eb141278dbcad938ea70ad5458c150.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_66eb141278dbcad938ea70ad5458c150
-
Size
129KB
-
MD5
66eb141278dbcad938ea70ad5458c150
-
SHA1
d3cc56902409bd38e81a884754549485b03fb031
-
SHA256
5442d52f797f8d616d025d209626b00c839029a2d6e5935a7c9132f5140332b4
-
SHA512
d4e9c2382335160a65de31302a3d36300a8141fa62ac2030bddb1c754b1ea750a1f5a8c35e1f2a03b7a00ad03ec64fbf2c748f846dad3b2e4ec44ebbc44f1c41
-
SSDEEP
3072:Lqn64JDORzLIxEvZ6EFMHtyFTtn7m5SDNT+G:un/JDO1IAZ6EQ09ZmERT+G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_66eb141278dbcad938ea70ad5458c150
Files
-
JaffaCakes118_66eb141278dbcad938ea70ad5458c150.exe windows:5 windows x86 arch:x86
bfb7af7d8c71ce84842927bc419df4ae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LocalFlags
GetFileAttributesW
GetStringTypeA
SetLastError
CreateDirectoryW
GetCurrentThread
GetModuleHandleA
HeapFree
CreateEventA
GetFileAttributesW
DeviceIoControl
RemoveDirectoryW
FindClose
SetCommBreak
GetPrivateProfileSectionA
GetCurrentProcess
VirtualProtectEx
GlobalLock
GetVersionExA
CloseHandle
GetPrivateProfileIntA
user32
GetWindowLongW
DefDlgProcA
wsprintfW
SetFocus
GetWindowTextW
DispatchMessageA
SetCursorPos
IsZoomed
LoadCursorA
PeekMessageW
IsDialogMessageA
PostMessageW
IsWindow
msorcl32
SQLError
SQLCancel
SQLDisconnect
SQLConnect
ntshrui
IsPathSharedA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE