dews
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_36da92091674ea2f46532a6cc29c86e5.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_36da92091674ea2f46532a6cc29c86e5.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_36da92091674ea2f46532a6cc29c86e5
-
Size
11.0MB
-
MD5
36da92091674ea2f46532a6cc29c86e5
-
SHA1
db5804956ba8e333b975c1294bf953a9a0c692a4
-
SHA256
8acfd8a5a4901ca5bf938fe131c5088aff69f00b9b2e2daeefdec896a9c95763
-
SHA512
c5e00c3a48844a73e49201a52973cfb98e11d45aee4132225872519e2842e4b6bf3b662a7fad2b89adc1c784405a88e9986a8578764f85b3399e2ab699a2a6bc
-
SSDEEP
3072:qrLSAaIXFM9X/WWIyOEfEDQMZWecFKmZ:sNWktyH9V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_36da92091674ea2f46532a6cc29c86e5
Files
-
JaffaCakes118_36da92091674ea2f46532a6cc29c86e5.exe windows:5 windows x86 arch:x86
e4c612f96489c3047672d0aa01e8ee66
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitNamedPipeA
lstrlenW
LoadLibraryA
OpenWaitableTimerW
GetSystemDirectoryA
GetVersionExW
Sleep
FindFirstFileW
GetTickCount
OpenFileMappingW
DeleteFileA
GetModuleHandleW
CompareStringA
CreateSemaphoreW
CreateMutexW
GetProcAddress
GetFileSize
CreateEventA
GetSystemDirectoryW
CreateFileA
SetLocalTime
GetDateFormatW
FindResourceA
LoadLibraryW
GetCommandLineA
user32
GetClassLongA
PostMessageW
DialogBoxParamA
wsprintfA
CreateDesktopW
DrawStateA
GetDlgItemTextA
IsCharLowerA
MessageBoxW
DispatchMessageA
LoadBitmapW
ctl3d32
Ctl3dGetVer
Ctl3dCtlColor
Ctl3dRegister
Ctl3dEnabled
shlwapi
UrlCompareW
PathCommonPrefixA
UrlGetPartW
PathIsURLA
PathCombineA
UrlCanonicalizeW
UrlUnescapeA
PathIsRootW
UrlGetLocationW
UrlEscapeA
UrlCreateFromPathA
Exports
Exports
Sections
.text Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 708B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10.9MB - Virtual size: 368B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ