Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_66d0b7d0ac85bc08fa2dda03ba97b200.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_66d0b7d0ac85bc08fa2dda03ba97b200.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_66d0b7d0ac85bc08fa2dda03ba97b200
-
Size
137KB
-
MD5
66d0b7d0ac85bc08fa2dda03ba97b200
-
SHA1
fa34fee422188f49d5949e5bee58f72b01015ed1
-
SHA256
f1ef6101d07d6d6fc419fd14316960eaa79153cb08f5ca3d665eddf2710be49e
-
SHA512
a6458004a1aee501966598fdef6feb2a65d1bfa30b837fafca42cd7c6ddd7045961e0e9b508b272937e1c50e060e0099ce0141947340d641bdba5f761787a8ae
-
SSDEEP
3072:tTJxIz4fsSLt/sMq6jcm5gKA9LvunyJBWAyYfKVdTwGGYW:OUfsSLtHqCcm5gKA9Lvuy3TNwTbGY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_66d0b7d0ac85bc08fa2dda03ba97b200
Files
-
JaffaCakes118_66d0b7d0ac85bc08fa2dda03ba97b200.exe windows:5 windows x86 arch:x86
7a7761d591741c2319e45fd55496f910
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentThread
GetStringTypeA
DeleteFileA
lstrlenA
VirtualProtectEx
DeviceIoControl
CloseHandle
GetFileAttributesA
LoadLibraryA
GetCurrentProcess
HeapDestroy
HeapFree
LocalLock
CreateEventW
GetPrivateProfileIntW
FindVolumeClose
GetStdHandle
DeviceIoControl
OpenMutexA
GetDriveTypeA
GetPrivateProfileSectionA
uxtheme
CloseThemeData
DrawThemeBackground
GetThemeColor
CloseThemeData
GetThemeTextMetrics
GetWindowTheme
IsThemeActive
SetWindowTheme
GetThemeSysSize
OpenThemeData
GetThemeBool
GetThemeTextExtent
DrawThemeEdge
odbccp32
SQLConfigDataSource
SQLInstallDriver
SQLGetAvailableDrivers
SQLInstallODBC
msasn1
ASN1BERDecBool
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ