Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_8d496d4cd90fc4f686e2fe25a2a12e29.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_8d496d4cd90fc4f686e2fe25a2a12e29.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_8d496d4cd90fc4f686e2fe25a2a12e29
-
Size
14.7MB
-
MD5
8d496d4cd90fc4f686e2fe25a2a12e29
-
SHA1
af7136255b04e8062ae6d91315d25db19b817339
-
SHA256
2beb5b451168718338d33ee3110dc770a0a3886f9fc72c636411a117c6fbd196
-
SHA512
80b3981ac60e97c01835259dbcc79a20b3559baabeb134c3b5e32bd5f6f4eb6659473886fb30f0358e3d32def0e3ac4aaa7ba8a5a94733c53be3f2b6e3625523
-
SSDEEP
1536:TVZK1I9rn2BHELrWh9iuDdJm7CyY8rhGDNDxTWNdUhUFIq:XK1Mn2BHsrt4mYnrMdUh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_8d496d4cd90fc4f686e2fe25a2a12e29
Files
-
JaffaCakes118_8d496d4cd90fc4f686e2fe25a2a12e29.exe windows:5 windows x86 arch:x86
eea35c08b4b314e861faff49bf279746
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
DispatchMessageW
IsDialogMessageW
DrawStateA
GetMessageW
LoadIconA
DialogBoxParamA
PostMessageW
PeekMessageA
LoadBitmapW
IsCharLowerW
GetClassLongA
LoadCursorA
dsprop
CheckADsError
ErrMsg
advapi32
OpenServiceA
RegSaveKeyA
InitializeAcl
RegLoadKeyW
RegOpenKeyA
RegDeleteValueW
CryptSignHashW
RegRestoreKeyW
RegEnumKeyW
RegCloseKey
GetUserNameA
RegUnLoadKeyA
RegCreateKeyExW
authz
AuthzFreeAuditEvent
AuthzAddSidsToContext
esent
JetBeginTransaction
JetCloseTable
JetCloseDatabase
shell32
DragAcceptFiles
ShellAboutA
SHGetFolderPathW
SHGetDataFromIDListW
ShellExecuteA
FindExecutableW
SHGetMalloc
ExtractIconA
SHGetFileInfoA
DragFinish
DllGetClassObject
ShellExecuteA
DragQueryFileW
ShellMessageBoxW
SHDefExtractIconA
StrChrW
StrStrW
cryptdll
CDLocateRng
MD5Update
MD5Init
CDBuildVect
MD5Final
shlwapi
UrlCanonicalizeA
UrlUnescapeA
PathIsRootW
UrlGetLocationA
PathCommonPrefixA
PathCombineA
UrlHashA
UrlCompareA
UrlIsA
UrlCreateFromPathA
UrlEscapeW
kernel32
ExitProcess
InterlockedIncrement
GetDateFormatW
OpenJobObjectA
GetModuleHandleA
FindFirstFileA
LoadLibraryA
SleepEx
GetLongPathNameA
GetLastError
MoveFileExA
GetWindowsDirectoryA
GetShortPathNameW
SetLocalTime
VirtualAlloc
CreateMutexA
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.ipa Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_WRITE
.wat Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14.6MB - Virtual size: 1KB
IMAGE_SCN_MEM_READ