Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_98b9ee58f23e50a27cc8fd93de2ef08a.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_98b9ee58f23e50a27cc8fd93de2ef08a.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_98b9ee58f23e50a27cc8fd93de2ef08a
-
Size
1.1MB
-
MD5
98b9ee58f23e50a27cc8fd93de2ef08a
-
SHA1
92da139ae7a2ca9e13edb70f614e6b6a84143b08
-
SHA256
b24cc506fb4cef38b05dabfac2e15ef98e8e0d55fccc421b8755230937961d1c
-
SHA512
5648121102a02a8344abb9b68c7106905abcd43085d73607b5b5d8b852418c602588f374a07c9e2f7b68f367868f099929b8025c20136067bc81c09fb9ba0d38
-
SSDEEP
24576:g0BG9gGUvH+uStz+Xdzu6ENDrhh1bx7n2H:g0PGAeF+Nurlrxbx7G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_98b9ee58f23e50a27cc8fd93de2ef08a
Files
-
JaffaCakes118_98b9ee58f23e50a27cc8fd93de2ef08a.exe windows:4 windows x86 arch:x86
bfffefca6535afcc9bd6b5d20058c57e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryA
WaitForSingleObject
GetCurrentDirectoryW
SetEndOfFile
GetStringTypeW
GetStringTypeA
LoadLibraryA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetCPInfo
CreateProcessA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
FlushFileBuffers
SetStdHandle
IsBadWritePtr
VirtualAlloc
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetProcAddress
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
WideCharToMultiByte
HeapFree
HeapSize
GetLastError
SetFileTime
LocalFileTimeToFileTime
GetFullPathNameW
GetFullPathNameA
GetTempPathW
GetTempPathA
GetModuleFileNameW
DeleteFileW
DeleteFileA
SetFilePointer
GetFileAttributesW
CreateDirectoryW
SetCurrentDirectoryW
SetCurrentDirectoryA
SetFileAttributesW
RemoveDirectoryW
CreateDirectoryA
SetFileAttributesA
GetFileAttributesA
CreateFileA
Sleep
GetTickCount
GetACP
GetOEMCP
GetComputerNameW
FormatMessageA
GetModuleFileNameA
CloseHandle
ReadFile
WriteFile
GetFileSize
FileTimeToSystemTime
SystemTimeToFileTime
GetLocalTime
GetVersionExA
CreateFileW
GetCurrentThreadId
RtlUnwind
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetTimeZoneInformation
HeapReAlloc
HeapAlloc
GetExitCodeProcess
user32
PostMessageA
SetTimer
GetDlgItemTextA
LoadStringA
DefWindowProcA
DestroyWindow
BeginPaint
EndPaint
GetDlgItemTextW
SetWindowTextW
MoveWindow
SetDlgItemTextW
EnableWindow
EndDialog
PostQuitMessage
MessageBoxW
GetDlgItem
SendMessageA
GetDesktopWindow
GetWindowRect
CopyRect
OffsetRect
SetWindowPos
CreateWindowExW
DialogBoxParamW
LoadCursorA
RegisterClassExW
LoadStringW
GetMessageA
TranslateMessage
DispatchMessageA
MessageBoxA
SetDlgItemTextA
shell32
ShellExecuteExW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
advapi32
CryptAcquireContextA
CryptReleaseContext
CryptGenRandom
GetUserNameA
Sections
.text Size: 236KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 276KB - Virtual size: 274KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ