Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_6f5dbba8032b950e211b021f66817b00.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_6f5dbba8032b950e211b021f66817b00.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_6f5dbba8032b950e211b021f66817b00
-
Size
121KB
-
MD5
6f5dbba8032b950e211b021f66817b00
-
SHA1
33e1d68c74db6eea3f54283925e0f3ab3439d2aa
-
SHA256
3d1dd5a0f8df1607bee31a8c118b875499956abe7ad65a5f901ae613e96a993c
-
SHA512
e69b9bb3bfdbbbe47dba9ec05d24d3d3929f9cc822e7e0fbbfa848f66e64f1209dc2c4057216ce2aef2e82cf4f51545bf408cc7951f8cc61dde3520c3b4d1a67
-
SSDEEP
3072:HaIHAQ48UPhev5Atj/3uqP5jyTG/DZFrrV7q+O8:yDjPSkj/3uqB+TGrL/O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_6f5dbba8032b950e211b021f66817b00
Files
-
JaffaCakes118_6f5dbba8032b950e211b021f66817b00.exe windows:4 windows x86 arch:x86
e4ca93cfe965d15fff7ccf5d61658289
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
WriteConsoleW
GetModuleHandleA
GetFileSize
WriteConsoleW
HeapCreate
IsValidLocale
GetFileTime
GetCurrentDirectoryW
ReadFile
lstrcpyW
IsBadStringPtrW
FormatMessageA
GetLastError
CreateMutexA
SetFileAttributesA
CloseHandle
lstrcpyA
GetStartupInfoA
FindResourceA
ReleaseMutex
WriteConsoleW
msi
MsiCloseAllHandles
MsiCloseHandle
MsiCreateRecord
MsiAdvertiseProductA
user32
SetCursorPos
IsWindow
IsZoomed
IsCharLowerA
PeekMessageW
LoadCursorW
GetWindowTextA
PostMessageW
wsprintfW
IsDialogMessageA
SetFocus
DispatchMessageA
GetWindowLongW
wldap32
ldap_add
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text1 Size: 1024B - Virtual size: 263B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE