Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_76b1bed7d4f9c4c2eed7cc55b2cc5750.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_76b1bed7d4f9c4c2eed7cc55b2cc5750.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_76b1bed7d4f9c4c2eed7cc55b2cc5750
-
Size
113KB
-
MD5
76b1bed7d4f9c4c2eed7cc55b2cc5750
-
SHA1
3eebe4488cf7521e0b000ec42e895361f73f7249
-
SHA256
c64cf1960bc60e549915885b136172ddc252a00168a93a4d057be44c139aae6e
-
SHA512
c844f6d30ce8bb02491299b75a4598a7f4810d2dc0e911cbf8fe0df23abfc43a2b4a885f4b4784de4580bcc6f227b1de6978fee5050e68ba6be000ced0827cdd
-
SSDEEP
3072:3JmiMLS03K5ElSvw5ZMkCv/ZaeTzAwAz+P:3Jp8k2SvoMkCvBaCEHaP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_76b1bed7d4f9c4c2eed7cc55b2cc5750
Files
-
JaffaCakes118_76b1bed7d4f9c4c2eed7cc55b2cc5750.exe windows:5 windows x86 arch:x86
089555b1baabe68874b2333e7282a184
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetPrivateProfileSectionW
LoadLibraryW
HeapDestroy
WriteConsoleW
Sleep
GetProcessHeap
HeapSize
GetStartupInfoA
lstrcpyA
DeleteFileA
VirtualProtect
CopyFileA
lstrlenW
WriteConsoleW
CancelIo
SetEvent
GetDriveTypeW
WriteConsoleW
GetCommandLineA
AddAtomW
GetFileAttributesA
mmcndmgr
DllGetClassObject
DllRegisterServer
DllCanUnloadNow
DllRegisterServer
uxtheme
GetThemeSysSize
GetThemeTextMetrics
GetWindowTheme
CloseThemeData
CloseThemeData
GetThemeBool
OpenThemeData
GetThemeTextExtent
GetThemeColor
DrawThemeBackground
SetWindowTheme
IsThemeActive
DrawThemeEdge
Sections
.text Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 274B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE