Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_7be672eadd7efde3197e091fc32afd36.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_7be672eadd7efde3197e091fc32afd36.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_7be672eadd7efde3197e091fc32afd36
-
Size
203KB
-
MD5
7be672eadd7efde3197e091fc32afd36
-
SHA1
e74449ac938e2fc7e9fb5a161ca2b23d15ecd71c
-
SHA256
d5b290a93cd9b87b6965075b4486724a5cbfc34bc9e5a772e614633ed220a3b5
-
SHA512
b2977a5d035424d2f8ab4ae340262f7c06c5f15bf5aca02c07f35c021ffc4594ce229b9cbc3aa3c02b7fd2f4bdf1a90891b79b87b02bb40e5766a079fa1dc8bb
-
SSDEEP
6144:5F5BysCrVqOd4v4wzLe0Xtk4T9IyxZuIl4xvZf:n5BHkNngrz6R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_7be672eadd7efde3197e091fc32afd36
Files
-
JaffaCakes118_7be672eadd7efde3197e091fc32afd36.exe windows:4 windows x86 arch:x86
bd63f22bd19f225cfe8b0ac46b62b504
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDiskFreeSpaceA
MoveFileA
ReplaceFileA
GetLongPathNameA
GetProcAddress
GetModuleHandleA
CreateFileW
lstrcatW
OpenWaitableTimerA
GetSystemDefaultLangID
FindResourceA
GetCommandLineA
GetWindowsDirectoryW
MulDiv
ReadFile
OpenMutexA
OpenProcess
GetVolumeInformationW
IsBadWritePtr
GetVersion
lstrcpynW
GetTimeFormatW
DosDateTimeToFileTime
lstrcmpW
GetCurrentProcess
GetVersionExA
OpenFile
GetTempPathW
user32
EndMenu
IsMenu
ArrangeIconicWindows
DestroyMenu
GetKeyboardType
DrawTextA
EnumDesktopsW
GetWindowRect
mouse_event
LoadIconA
wvsprintfW
GetAsyncKeyState
DefWindowProcW
GetActiveWindow
RemoveMenu
FrameRect
RegisterClassExW
CharLowerA
IsWindowEnabled
GetSysColorBrush
SetDlgItemTextW
GetWindowLongW
GetDlgItemTextW
GetMenuStringA
GetClassInfoExW
GetMenuItemCount
GetDesktopWindow
GetKeyState
LoadMenuW
FlashWindow
LoadCursorW
GetTopWindow
CreateCaret
InsertMenuW
DefDlgProcA
GetMenuInfo
GetWindowLongA
CreatePopupMenu
LoadMenuA
GetDlgItem
MoveWindow
SetTimer
AdjustWindowRect
gdi32
BeginPath
CreateDCW
CreateFontA
ColorCorrectPalette
Rectangle
GetPaletteEntries
SetICMProfileW
GetRandomRgn
GetColorSpace
SetTextColor
DeleteColorSpace
GetObjectType
StretchDIBits
RemoveFontResourceExA
CreateRectRgn
advapi32
RegReplaceKeyW
RegOpenKeyExA
RegSaveKeyA
RegDeleteKeyA
RegOpenKeyA
comctl32
ImageList_GetIcon
ImageList_Write
ImageList_GetImageRect
CreateStatusWindow
ImageList_Duplicate
wininet
InternetSetDialStateA
InternetDialA
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.dNDJJh Size: 2KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.cuF Size: 2KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.PzCg Size: 3KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.nc Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RX Size: 512B - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.foeaMd Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Xx Size: 1024B - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 169KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ