Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_69c103750fdb652b6dbab5cce3f890e0.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
JaffaCakes118_69c103750fdb652b6dbab5cce3f890e0.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_69c103750fdb652b6dbab5cce3f890e0
-
Size
128KB
-
MD5
69c103750fdb652b6dbab5cce3f890e0
-
SHA1
3be1d5dd6a4c40684ab3c2aac1910bf41ffffd0c
-
SHA256
face9ed60ce2b5ea083157a7b0b693c576cd243d83556965874a5e349dac8619
-
SHA512
1fd95c6ee1b265e1e30221634d49a900ac1f71a954f89e2974994241f3264b2a617c05d93a476f9e7512a13322813614def56937829a19bcbf64659a79f10332
-
SSDEEP
3072:Xq+hXDVNHwTKU7PUROt/qYcNs2F+I1GxEpHRKVUOKStb2:6N7cROt/fcGNydRKVU+t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_69c103750fdb652b6dbab5cce3f890e0
Files
-
JaffaCakes118_69c103750fdb652b6dbab5cce3f890e0.exe windows:5 windows x86 arch:x86
a11509edb8392bc042434a9950ee3e05
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentProcess
MapViewOfFile
FindClose
SetPriorityClass
CreateDirectoryW
GetExitCodeThread
IsValidCodePage
GetModuleHandleA
HeapFree
VirtualProtect
GetLocaleInfoW
GetStringTypeA
GetTickCount
GetFileAttributesA
RemoveDirectoryW
GetFileAttributesA
TlsGetValue
FindResourceW
LocalLock
SetLastError
SuspendThread
user32
wsprintfW
GetWindowLongW
IsWindow
PeekMessageW
LoadStringW
DispatchMessageA
PostMessageW
LoadCursorA
SetFocus
GetWindowTextW
SetCursor
LoadImageW
IsDialogMessageA
msctf
DllUnregisterServer
DllCanUnloadNow
TF_InitSystem
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE