Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_6f1d008c6d0499aa29a2e2942d362960.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_6f1d008c6d0499aa29a2e2942d362960.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_6f1d008c6d0499aa29a2e2942d362960
-
Size
73KB
-
MD5
6f1d008c6d0499aa29a2e2942d362960
-
SHA1
853c07f3cd4823ce6c3e782ca5fa0c3fddeb28c8
-
SHA256
773ed267ba4f811688af03c9a4c9d8acf03be9fab275c40c69986d1658870f59
-
SHA512
dd6a01faf5f6a8e72041ea6b90c1dce38ec996627a77a8f8576431d9e3dbb6db235794e71518903f2e34416f64caf8670306ca2b2ab978b310f4e3211d13b344
-
SSDEEP
1536:gLxnAv2aSRpdNAZNBGa5TsFPChwbaJgX5DHu+/Ou9O39:6+v2TAAa5TEMw+Kzr9O39
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_6f1d008c6d0499aa29a2e2942d362960
Files
-
JaffaCakes118_6f1d008c6d0499aa29a2e2942d362960.exe windows:5 windows x86 arch:x86
fe43bc6bf0d97f0a5e34f28b8ad68b65
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessW
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
FormatMessageA
FormatMessageW
GetComputerNameW
GetCurrentThreadId
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetProcessHeap
GetStartupInfoA
GetThreadLocale
GetVersionExA
GetVersionExW
GetWindowsDirectoryA
GetWindowsDirectoryW
HeapAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
InterlockedExchange
InterlockedIncrement
CreateMutexA
LocalAlloc
LocalFree
MoveFileExW
MultiByteToWideChar
OutputDebugStringW
RaiseException
ReleaseMutex
SetEvent
SetFileAttributesA
SetFilePointer
SetLastError
SetThreadExecutionState
SetThreadLocale
Sleep
WaitForMultipleObjects
WideCharToMultiByte
WriteFile
lstrcmpW
lstrcpyA
lstrlenA
CreateFileW
lstrcatW
VirtualAlloc
LoadLibraryW
CreateFileA
CreateEventA
LeaveCriticalSection
CloseHandle
user32
LoadIconA
LoadIconW
gdi32
GetStockObject
advapi32
RegOpenKeyW
Sections
.text Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 340B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ