Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_7735855acf95a20be81302c8867ed6ca.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_7735855acf95a20be81302c8867ed6ca.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_7735855acf95a20be81302c8867ed6ca
-
Size
179KB
-
MD5
7735855acf95a20be81302c8867ed6ca
-
SHA1
e1aed269a95936936914238fe2f923c0e0894d02
-
SHA256
9e9cc54cc7db0037d641d1496ea2021b248ad829b7c19484886eba8c3d15d6f2
-
SHA512
0660a122ebab89bfd1d975a74e34b7456e0397c8306dfefe74069bd1c3ca1c8c613a842adf131464c14f216d46eb0df3bb71c5b491e65e94d1dff74d9e69c8ea
-
SSDEEP
3072:6uTbE585+kWQKhRPZeBx+IG1jaFjPy7D6lC2YGvrFB5nXIADu:6Sc8wRzhaxK7D6LrFBNh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_7735855acf95a20be81302c8867ed6ca
Files
-
JaffaCakes118_7735855acf95a20be81302c8867ed6ca.exe windows:4 windows x86 arch:x86
016f651a7c996669a7646caa565ef47a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
rpcrt4
UuidCreate
user32
GetClassLongA
MessageBoxW
ole32
CoInitialize
CoCreateInstance
CoCreateGuid
StringFromGUID2
CoUninitialize
CoSetProxyBlanket
shell32
SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW
advapi32
RegCloseKey
RegCreateKeyExW
RegSetValueExW
kernel32
GetCurrentProcess
GetThreadPriority
GetLocaleInfoW
HeapAlloc
GetCurrentThreadId
WriteConsoleA
GetCommandLineA
WriteFile
GetProcessHeap
RtlUnwind
CreateFileA
HeapReAlloc
HeapFree
HeapSize
GetCPInfo
DeleteCriticalSection
GetLastError
SetCommConfig
GlobalAlloc
SetEndOfFile
RaiseException
GetCurrentDirectoryW
InitializeCriticalSection
GetVersionExA
CloseHandle
InterlockedDecrement
TerminateProcess
SetStdHandle
GetModuleFileNameW
LeaveCriticalSection
GetModuleHandleA
EnumResourceNamesA
ReadFile
ExitProcess
GetUserDefaultLCID
IsValidLocale
ExitProcess
EnumSystemLocalesA
Sleep
WideCharToMultiByte
IsDebuggerPresent
LCMapStringA
SetUnhandledExceptionFilter
LCMapStringW
EnterCriticalSection
InterlockedIncrement
WriteConsoleW
MultiByteToWideChar
IsValidCodePage
GetConsoleOutputCP
GetFullPathNameW
UnhandledExceptionFilter
GetProcAddress
GetFullPathNameA
Sections
.text Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 512B - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ