Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_790b6a8c21496860e8ee1e6209edda8c.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
JaffaCakes118_790b6a8c21496860e8ee1e6209edda8c.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_790b6a8c21496860e8ee1e6209edda8c
-
Size
168KB
-
MD5
790b6a8c21496860e8ee1e6209edda8c
-
SHA1
a3f6a0669989c06b5e448bef2d5970d29e78d0d7
-
SHA256
49da5a140446b46889082f0300fc4c106730d0d4a88547fb817b260d3d9bfc6d
-
SHA512
1eacfa1256625808533e6d8fb51751b8d9c14ef86205eb4278f5ea646863b5b906024c102c9267aca7365274044eab31e127588a7fd892a4cfd5991de3da5625
-
SSDEEP
3072:kUZPTMPn6/5Br8OWNO50zMyyxWE/jr4Eu2GVXKx+tUHKBbX6:pZPWnS38BNO50zMyS7rUIYZ6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_790b6a8c21496860e8ee1e6209edda8c
Files
-
JaffaCakes118_790b6a8c21496860e8ee1e6209edda8c.exe windows:4 windows x86 arch:x86
ab2765f599838754d473102d7b7cd6eb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoGetMalloc
StringFromGUID2
CoTaskMemFree
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
msimg32
AlphaBlend
TransparentBlt
kernel32
GetCPInfoExA
GetACP
lstrlenW
TlsGetValue
WriteFile
MultiByteToWideChar
GetStartupInfoA
QueryPerformanceCounter
GetEnvironmentStrings
FreeEnvironmentStringsW
GetFileType
GetEnvironmentStringsW
GetThreadLocale
UnhandledExceptionFilter
GetStdHandle
WideCharToMultiByte
SetHandleCount
EnumResourceTypesA
InitializeCriticalSection
EnterCriticalSection
GetLastError
InterlockedIncrement
FreeEnvironmentStringsA
GetLocaleInfoA
DeleteCriticalSection
GetCPInfo
LoadLibraryW
HeapSize
InterlockedExchange
RaiseException
TlsSetValue
GetTickCount
LeaveCriticalSection
GetVersionExA
GetOEMCP
GetCurrentProcessId
gdi32
SelectObject
GetTextMetricsA
GetDeviceCaps
DeleteObject
GetTextExtentPointA
CreateFontIndirectA
Sections
.text Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ