dews
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_df111541b38a5770af185e26817f8ddc.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_df111541b38a5770af185e26817f8ddc.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_df111541b38a5770af185e26817f8ddc
-
Size
14.0MB
-
MD5
df111541b38a5770af185e26817f8ddc
-
SHA1
3cb16dac04be9c17cafba3c8c4b94f4d264d5a20
-
SHA256
3299d2af046f00158fa626819958e757bef231094dce1cc1e3d2f2d30657901e
-
SHA512
177e75aedb32afea5a19b8ab9be60d3cb37dbfdcbaa017c58caf9339dfa55fd7951cabad5f9ed21544328204590c9bdb4ebde0b02944bba0d093ea5a6ac42d74
-
SSDEEP
3072:OrLSAaIXFM9X/WWIyOEfEDQMZWecFKmZ:oNWktyH9V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_df111541b38a5770af185e26817f8ddc
Files
-
JaffaCakes118_df111541b38a5770af185e26817f8ddc.exe windows:5 windows x86 arch:x86
e4c612f96489c3047672d0aa01e8ee66
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitNamedPipeA
lstrlenW
LoadLibraryA
OpenWaitableTimerW
GetSystemDirectoryA
GetVersionExW
Sleep
FindFirstFileW
GetTickCount
OpenFileMappingW
DeleteFileA
GetModuleHandleW
CompareStringA
CreateSemaphoreW
CreateMutexW
GetProcAddress
GetFileSize
CreateEventA
GetSystemDirectoryW
CreateFileA
SetLocalTime
GetDateFormatW
FindResourceA
LoadLibraryW
GetCommandLineA
user32
GetClassLongA
PostMessageW
DialogBoxParamA
wsprintfA
CreateDesktopW
DrawStateA
GetDlgItemTextA
IsCharLowerA
MessageBoxW
DispatchMessageA
LoadBitmapW
ctl3d32
Ctl3dGetVer
Ctl3dCtlColor
Ctl3dRegister
Ctl3dEnabled
shlwapi
UrlCompareW
PathCommonPrefixA
UrlGetPartW
PathIsURLA
PathCombineA
UrlCanonicalizeW
UrlUnescapeA
PathIsRootW
UrlGetLocationW
UrlEscapeA
UrlCreateFromPathA
Exports
Exports
Sections
.text Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 708B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13.9MB - Virtual size: 368B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ