Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_6cfa60b177c97ad7cc183a4e58af4ab0.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_6cfa60b177c97ad7cc183a4e58af4ab0
-
Size
286KB
-
MD5
6cfa60b177c97ad7cc183a4e58af4ab0
-
SHA1
d4277b1ed617a378cf67303e1589c39dc64bb315
-
SHA256
49516933c6577802b0c0935e5b4ce49de6f36dc2bb9542c21695a2a0032c34c4
-
SHA512
1c184821f92a4a826066846dea015d10ae308fc98bdfa316e5d32c42d1461cd6b2b709878d328dd180ee17f2bb140bcb9e7eedb18e9d7c700f7c6d43fa16864a
-
SSDEEP
6144:/vvGCyOf2spskP/fVE+sS0fKuVqeY2zrsT:/vvJxf2se/S0ffLzr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_6cfa60b177c97ad7cc183a4e58af4ab0
Files
-
JaffaCakes118_6cfa60b177c97ad7cc183a4e58af4ab0.exe windows:4 windows x86 arch:x86
dd7fc7df89e4771c69f8cec34b266ecc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
oleacc
CreateStdAccessibleObject
shlwapi
StrRetToBSTR
UrlCreateFromPathW
PathCreateFromUrlW
PathRemoveFileSpecW
PathAppendW
PathIsRelativeW
PathFindExtensionW
StrCmpIW
UrlUnescapeW
PathCombineW
kernel32
GetModuleHandleW
GlobalFindAtomA
GetProcessHeap
GetStartupInfoA
GetCurrentThreadId
InterlockedExchange
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcess
GetTickCount
EnumResourceLanguagesW
GetLocaleInfoW
UnhandledExceptionFilter
LocalAlloc
GetPrivateProfileSectionA
GetCurrentProcessId
VirtualProtect
QueryPerformanceCounter
TerminateProcess
FoldStringW
IsDebuggerPresent
InterlockedCompareExchange
DeleteFileW
Sections
.text Size: 144KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ