Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_6d76d3f3d723628a0914a5acdcccafd0.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_6d76d3f3d723628a0914a5acdcccafd0.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_6d76d3f3d723628a0914a5acdcccafd0
-
Size
116KB
-
MD5
6d76d3f3d723628a0914a5acdcccafd0
-
SHA1
7a41e19189b4e2acdf008fa30f94a5832bdc19ee
-
SHA256
79d19b9c9ea4f29c355c9cfa0915db728c652b34c1c9f14909d64f9d6fb0fd1c
-
SHA512
7a462c5233269ebb3e0d966cdc0a57cdfbd2cee659612ad4eec1c633700b4adfb50ad9074477192ad2d74d8e9797d74fd2849e73a85b3f9b749061c337dd37ce
-
SSDEEP
1536:fpJPlHYtmP3w9xatKrk/m9tmvLOLoxzW4AcNQ5FuE3YDKdHxX6Va6KNYp/3Z0oyD:fpJPlRfw9wtukuABytrB6M6jp/+oyD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_6d76d3f3d723628a0914a5acdcccafd0
Files
-
JaffaCakes118_6d76d3f3d723628a0914a5acdcccafd0.exe windows:4 windows x86 arch:x86
ff9bab013b15e7b0b36f8be009754a2a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentDirectoryA
GetModuleHandleA
GetFileTime
GetLastError
CloseHandle
IsValidLocale
GetFileSize
SetPriorityClass
HeapCreate
ReleaseMutex
IsBadStringPtrA
WriteConsoleW
FindResourceA
GetFileAttributesA
lstrlenW
ReadFile
lstrcpyW
WriteConsoleW
GetStartupInfoA
WriteConsoleW
FormatMessageA
msftedit
SetCustomTextOutHandlerEx
RichEditWndProc
RichComboBoxWndProc
RichListBoxWndProc
clbcatq
SetSetupSave
SetupOpen
SetupOpen
SetupOpen
CheckMemoryGates
CheckMemoryGates
CheckMemoryGates
ComPlusMigrate
SetSetupSave
ComPlusMigrate
DllGetClassObject
DllGetClassObject
ComPlusMigrate
dsprop
CheckADsError
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 1024B - Virtual size: 263B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qedit Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ