Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_6d0796f822e76aaa09bd0f60b903b838.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_6d0796f822e76aaa09bd0f60b903b838.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_6d0796f822e76aaa09bd0f60b903b838
-
Size
123KB
-
MD5
6d0796f822e76aaa09bd0f60b903b838
-
SHA1
181436e25baffb3692be3825f7de0c125291b8d8
-
SHA256
b91226d353bfd9e703de47088f9a628a5cde2dd76bdb7da07666ed2a0de0b719
-
SHA512
4146163abbfad21de8674755ced1b9ba5c86b7868b2b9b78a2bbe0640e8a1ff7b41a47b489c36308701f0398c3159eb70ad04c9388e69eb00ca8150e300d8aea
-
SSDEEP
3072:tx0+MAabVlVsQzf/G1d1EbpHUeFPjUPTJoHgM:w+ybeeCwPjUPTJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_6d0796f822e76aaa09bd0f60b903b838
Files
-
JaffaCakes118_6d0796f822e76aaa09bd0f60b903b838.exe windows:5 windows x86 arch:x86
129261db4e3f25657635ce1fb7843357
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeleteFileA
SuspendThread
VirtualProtect
GetStringTypeW
CreateEventW
ResumeThread
CreateEventW
CreateEventW
SetLastError
lstrlenA
GetPrivateProfileSectionA
GetProcessVersion
GetPrivateProfileIntW
CreateEventW
GetDriveTypeA
LoadLibraryW
GetProcessHeap
TlsGetValue
GetCurrentThread
HeapFree
FindAtomA
clbcatq
CheckMemoryGates
CheckMemoryGates
DllGetClassObject
DllGetClassObject
ComPlusMigrate
CheckMemoryGates
ComPlusMigrate
ComPlusMigrate
SetupOpen
SetupOpen
SetupOpen
CheckMemoryGates
CheckMemoryGates
pdh
PdhGetLogFileTypeA
PdhAddCounterA
PdhGetLogFileSize
PdhCloseLog
Sections
.text Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 162B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ