Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_7b428cf13b631db853559f00cd15b7f0.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_7b428cf13b631db853559f00cd15b7f0.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_7b428cf13b631db853559f00cd15b7f0
-
Size
123KB
-
MD5
7b428cf13b631db853559f00cd15b7f0
-
SHA1
57f811700f48506a469dad2b3566174d2529bff4
-
SHA256
d5994019c56bfe195e8c0e633364d594c616225f953685ab1416aeb4daa411cc
-
SHA512
0f048ff4d0013805ca2c6f3d36985768e2445834b41329a4ea4e72f47f1b1c344b662b4000ae09081316e67c38e31a8e2ebcc9a336d9c4a0cfd19f1e725ebd7c
-
SSDEEP
1536:sny2nhXyqqdc5NI5Wn1tBTz2gWG2nzLAZq2nRB37vXzebVhaWXOxRWYlytgY:sbjqdWI5k1tBNTwz52nR1Deb3bdZtgY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_7b428cf13b631db853559f00cd15b7f0
Files
-
JaffaCakes118_7b428cf13b631db853559f00cd15b7f0.exe windows:5 windows x86 arch:x86
41caf7f4ade35ce0cb6b38cca9aed7d7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcessHeap
GetCurrentThread
FindAtomA
CreateEventW
ResumeThread
TlsGetValue
LoadLibraryW
GetProcessVersion
CreateEventW
GetDriveTypeA
lstrlenA
VirtualProtect
HeapFree
CreateEventW
GetPrivateProfileIntW
SetLastError
GetPrivateProfileSectionA
GetVolumePathNameA
DeleteFileA
GetStringTypeW
SuspendThread
clbcatq
ComPlusMigrate
DllGetClassObject
CheckMemoryGates
ComPlusMigrate
CheckMemoryGates
CheckMemoryGates
CheckMemoryGates
SetupOpen
SetupOpen
CheckMemoryGates
ComPlusMigrate
DllGetClassObject
SetupOpen
d3dramp
g_RampOld_BeadTbl
RampOldTri
RampOldTri
g_RampOld_BeadTbl
Sections
.text Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 11KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 455B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE