Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_7a5a0cbf0f1844982d49f420d774a807.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_7a5a0cbf0f1844982d49f420d774a807.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_7a5a0cbf0f1844982d49f420d774a807
-
Size
101KB
-
MD5
7a5a0cbf0f1844982d49f420d774a807
-
SHA1
d2c084e5e5e2d47f93640e8ed0272d33da18b20f
-
SHA256
eaf42e0b948a67d5a62dca61070aec79ba20c5cfe159cc24d0fdf8af4ac8ef81
-
SHA512
5d2489c63000c108d015b1396e6d4faefab1dabeed5ecb28077783818446436c35cf3e402ee4622b47fe1cdf4a9b926a0ffc180afb33c171a91fe9f229e2d90f
-
SSDEEP
1536:dMaUyXoGlJaT3zV9x9HFBr//beacu2oGts3WZxHewWYRXQqZ13Woe2g:d5doOwJLBbbe+2oGts3yHDWYhVZNWOg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_7a5a0cbf0f1844982d49f420d774a807
Files
-
JaffaCakes118_7a5a0cbf0f1844982d49f420d774a807.exe windows:5 windows x86 arch:x86
5f3d8ec42f473ce456daaa16226e9e32
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProfileIntA
GetACP
lstrcpyA
lstrcmpiW
GetStartupInfoA
GlobalAlloc
GetProcAddress
GetPrivateProfileStringW
GetFileSize
GetQueuedCompletionStatus
lstrcmpW
GlobalHandle
SetFilePointer
PostQueuedCompletionStatus
GetCurrentThread
MulDiv
InterlockedExchange
ReadFile
GetVersionExW
EnterCriticalSection
IsBadWritePtr
InterlockedIncrement
LoadLibraryW
QueryPerformanceCounter
GetSystemInfo
CreateFileW
GetDiskFreeSpaceW
SetEvent
WriteFile
GetCurrentProcessId
HeapAlloc
GetTickCount
IsBadReadPtr
CloseHandle
SetUnhandledExceptionFilter
GetFullPathNameW
WaitForMultipleObjects
GetSystemTimeAsFileTime
GlobalFree
MultiByteToWideChar
GetThreadPriority
SetThreadPriority
DeleteCriticalSection
GetProcessHeap
ReleaseSemaphore
VirtualFree
IsBadCodePtr
ResetEvent
SetEndOfFile
GlobalUnlock
LeaveCriticalSection
GetFileAttributesW
CreateThread
WideCharToMultiByte
CreateSemaphoreW
CreateEventW
SetLastError
GlobalLock
lstrcpyW
lstrcpynW
GetCurrentProcess
InitializeCriticalSection
FreeLibrary
HeapFree
lstrlenW
GetModuleFileNameA
CreateIoCompletionPort
GlobalMemoryStatus
InterlockedDecrement
WaitForSingleObject
DeleteFileW
GetLastError
lstrlenA
user32
MoveWindow
PeekMessageW
ClientToScreen
CreateDialogParamW
CheckRadioButton
SendMessageW
DispatchMessageW
IsWindowVisible
SetWindowLongW
GetDlgItem
ShowWindow
wsprintfW
EnableWindow
CheckDlgButton
ReleaseDC
GetWindowRect
GetDC
DestroyWindow
GetClientRect
LoadStringW
SetDlgItemInt
IsRectEmpty
SetDlgItemTextW
LoadCursorW
TranslateMessage
GetWindowLongW
GetDesktopWindow
InvalidateRect
IsWindow
GetDlgItemInt
DefWindowProcW
GetAsyncKeyState
SetCursor
advapi32
RegSetValueW
RegEnumKeyExW
RegCloseKey
RegOpenKeyExW
RegEnumKeyW
RegOpenKeyW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyW
RegQueryValueExW
msvfw32
ICClose
ICSendMessage
ICDecompress
ICOpen
ICCompress
ICLocate
ICGetInfo
winmm
waveInClose
waveInGetDevCapsW
waveInStop
waveInReset
mixerGetLineControlsW
mixerGetControlDetailsW
mixerGetID
mixerClose
waveInUnprepareHeader
mixerSetControlDetails
SendDriverMessage
waveInStart
CloseDriver
mixerOpen
waveInPrepareHeader
waveInAddBuffer
OpenDriver
mixerGetLineInfoW
waveInOpen
ole32
CoUninitialize
CoFreeUnusedLibraries
CoCreateInstance
CoTaskMemAlloc
CoInitialize
CoTaskMemFree
StringFromGUID2
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
gdi32
SelectObject
PatBlt
GetStockObject
GetTextExtentPoint32W
GetPaletteEntries
GetObjectW
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ