Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_6accaaa04099b9c11084a6281921caf7.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_6accaaa04099b9c11084a6281921caf7.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_6accaaa04099b9c11084a6281921caf7
-
Size
585KB
-
MD5
6accaaa04099b9c11084a6281921caf7
-
SHA1
bcb1741eebbe8ef48985bcf779488fd2d6bf758e
-
SHA256
cd970cc2e7e418c0eb4210af6150db6d359b3a13b8288e3bc540053fe3f664cf
-
SHA512
302b754535a7936f5341b351efe7e59a404bc0eec6a5b6c5c174e5fe968babf6b8d2bcbc57b2617a49a71d30cf37fa518c50a2f65afc849040781cc169c92edf
-
SSDEEP
12288:LWrs10oi/sgvqzH7cZtnAwyiokT9yJC2h/7biHTQrMXv9iECnggbazWTn6xsagm+:LWrs+/sgOcvnpyiJCC2hTG2MkECngg4A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_6accaaa04099b9c11084a6281921caf7
Files
-
JaffaCakes118_6accaaa04099b9c11084a6281921caf7.exe windows:5 windows x86 arch:x86
1ceafdb5adaac4c684fc9df84244e92e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_SYSTEM
Imports
kernel32
SetFilePointer
MultiByteToWideChar
WriteConsoleW
HeapSize
RtlUnwind
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
LoadLibraryW
GetSystemTimeAsFileTime
GetCurrentProcessId
LCMapStringW
QueryPerformanceCounter
GetConsoleScreenBufferInfo
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
DeleteCriticalSection
SetHandleCount
GetModuleFileNameW
ExitProcess
GetModuleHandleW
DecodePointer
GetStringTypeW
CreateFileW
lstrcpyW
CloseHandle
GetTickCount
EnumDateFormatsA
LoadLibraryA
GetProcAddress
lstrcmpiA
GetCurrentDirectoryW
CreateFileA
GetLastError
GetStdHandle
HeapCreate
Sleep
WriteFile
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
SetConsoleScreenBufferSize
HeapAlloc
AllocConsole
InterlockedDecrement
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RaiseException
GetStartupInfoW
HeapFree
EnterCriticalSection
LeaveCriticalSection
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetCommandLineA
HeapSetInformation
user32
GetMessageA
GetClassNameA
HideCaret
GetWindowRect
GetWindowDC
FillRect
GetKeyNameTextA
GetTopWindow
LoadBitmapA
GetClientRect
GetWindowTextLengthA
SendMessageA
ShowCaret
GetDC
TranslateMessage
SetDlgItemInt
GetWindowTextA
MapVirtualKeyA
SetRect
SetWindowLongA
GetScrollInfo
MessageBoxA
InvalidateRect
CreateAcceleratorTableA
GetWindowLongA
ReleaseDC
TranslateAcceleratorA
GetDlgItem
EndDialog
DefWindowProcA
GetDesktopWindow
ShowWindow
DispatchMessageA
SetCaretPos
SetWindowTextA
FindWindowA
GetDlgItemTextA
SetDlgItemTextA
gdi32
CreateFontIndirectA
GetDIBits
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
GetBkColor
CreateSolidBrush
BitBlt
advapi32
GetOldestEventLogRecord
RegisterEventSourceA
DeregisterEventSource
GetNumberOfEventLogRecords
OpenEventLogA
ReportEventA
CryptGetHashParam
odbc32
ord24
shlwapi
PathCompactPathA
comctl32
ImageList_Create
ImageList_Add
ord17
Sections
.text Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 397KB - Virtual size: 405KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ