Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_6b3bfdece641bfedf655f56f8b60a997.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_6b3bfdece641bfedf655f56f8b60a997
-
Size
4.6MB
-
MD5
6b3bfdece641bfedf655f56f8b60a997
-
SHA1
9ef5a9b2b6f84a47fd7400fc5a441d304451f668
-
SHA256
53dae3adf7b19683eb158318b223223df50c0c710c1c253cd1f90f8a57e14945
-
SHA512
add7ea7c46a53707b45d4bb8564f06a017712bb18ea5edf1425d7a9aec7cb436969fab5c19f2fa88c2a5ee4f34f1fbc6cc27111a5f639d53cc360bc628766367
-
SSDEEP
98304:wL9skSpoYgTXgp9L8iRJWzkKL/eVYi1tIACpKolMI9tiJwthGg5qEr:9gr09L8iRXKL/Y1TWxlMZqLiE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_6b3bfdece641bfedf655f56f8b60a997
Files
-
JaffaCakes118_6b3bfdece641bfedf655f56f8b60a997.exe windows:6 windows x86 arch:x86
908bea7ee71339f1c35ba419da3ba679
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
ShowWindow
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
wtsapi32
WTSSendMessageW
Sections
.text Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.JqjbwEJ Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yunrtqw Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.yunrtqw Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 469B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ