Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_7b22ac8258e9e7ad6ebb8535313f74c0.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
JaffaCakes118_7b22ac8258e9e7ad6ebb8535313f74c0.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_7b22ac8258e9e7ad6ebb8535313f74c0
-
Size
131KB
-
MD5
7b22ac8258e9e7ad6ebb8535313f74c0
-
SHA1
1d0a45395c2c5984c9f8c026310e5d7673268c7c
-
SHA256
cac2c1a49de3139330bc8552442caaa3b47744846bc0296cf0d56feb4e963ad7
-
SHA512
dad40b3fe050553ac8908250f3701e64687ba0244fcf3177bfd73d63c44ae1f3438d9ec603d3e91fe44839a20831139ef3019fee0f46b00d4277185a606d6ab6
-
SSDEEP
3072:bXWx7c2tWIjmq/z3qctu9vNCSraDV8Rf+4Az:LnEWIjFz3yHWB8Rm4A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_7b22ac8258e9e7ad6ebb8535313f74c0
Files
-
JaffaCakes118_7b22ac8258e9e7ad6ebb8535313f74c0.exe windows:5 windows x86 arch:x86
128e2f0ee88f910987809b9b204347da
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapFree
GetStdHandle
DeviceIoControl
CreateDirectoryW
GetCurrentProcess
CloseHandle
VirtualProtectEx
GetFileAttributesW
GetPrivateProfileIntA
GlobalLock
LoadLibraryA
GlobalFlags
GetFileAttributesW
GetPrivateProfileSectionA
GetCurrentThread
RemoveDirectoryA
CreateEventA
GetDriveTypeA
GetVersionExA
FindVolumeClose
GetStringTypeA
shell32
StrChrA
DragAcceptFiles
ShellAboutA
ExtractIconA
DuplicateIcon
DllUnregisterServer
SHFree
DragQueryFileA
ShellMessageBoxA
DragFinish
SHGetSettings
SHGetMalloc
DllUnregisterServer
odbccp32
SQLInstallODBC
SQLConfigDataSource
SQLInstallDriver
SQLGetAvailableDrivers
uxtheme
CloseThemeData
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ