Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_0f1338e1991adc7f282be7b9bf1ff834.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_0f1338e1991adc7f282be7b9bf1ff834
-
Size
188KB
-
MD5
0f1338e1991adc7f282be7b9bf1ff834
-
SHA1
1f10d0ffbe9ae4e312d7e0b435aeb4a04fd70efc
-
SHA256
19e9e59ba2f284bc7df20c817e539b04bd76883ea85c7635b5f0bf3b35a2761b
-
SHA512
792962ab530720226285324a09db8712a41a6dfbd47c0ff28a672f9ff70bd8ca764a3737033f32d809127282a44dcbd58f785fa4b58e2d278d293a45138fe5bf
-
SSDEEP
3072:bjNiyF5DyhIFYdZrmM4n1XvudI1V+6rdj7xE3GSo3ln+xRf2RKoUY6u//Y7KoO:XNikFyCFYdgM3dIBr5i2Sa5KQAt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_0f1338e1991adc7f282be7b9bf1ff834
Files
-
JaffaCakes118_0f1338e1991adc7f282be7b9bf1ff834.exe windows:4 windows x86 arch:x86
ed52441ea76f8ab5bd95334433bdf0ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
shlwapi
StrRetToStrA
SHCreateStreamOnFileEx
PathAppendA
PathIsContentTypeA
PathIsFileSpecA
PathCreateFromUrlW
kernel32
GetFileAttributesW
VirtualProtect
lstrcmpiW
FindAtomA
GetModuleFileNameW
VirtualQuery
OutputDebugStringW
GetModuleHandleA
SetEnvironmentVariableW
OutputDebugStringA
LocalFree
WideCharToMultiByte
GetFileInformationByHandle
SearchPathW
EnumResourceLanguagesA
DuplicateHandle
LocalAlloc
CreateDirectoryW
GetCurrentThreadId
GetStringTypeExW
SetLastError
ExitProcess
lstrlenW
MultiByteToWideChar
GetCurrentProcess
GetCurrentDirectoryW
InterlockedExchange
oleacc
CreateStdAccessibleObject
Sections
.text Size: 95KB - Virtual size: 234KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ