Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_0e4aababa44e7c791885d4a1008bee08.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_0e4aababa44e7c791885d4a1008bee08
-
Size
168KB
-
MD5
0e4aababa44e7c791885d4a1008bee08
-
SHA1
bb938024657863666262cdeec834cf077679f973
-
SHA256
16eac02ab1978d841957f0fa1860f25caa6c5cfa5f684fa4f941416b58dab1bb
-
SHA512
bcd9a9acb938147bea1d5c5807a27df60728637e36c49096d21352df7ef4d28d211ddbc2212795c0b65ecb84492817c57625eee81b47e400b3a1fa20a6c4fcc8
-
SSDEEP
3072:JSl1S5zLQDDh10NRW3/n2kJWQvitdEZzK50CkF0VWfwG84CZxjOSOU2YOto9eJ:yUCDDhK63/2kJpa7EZzFF0co/4CPjjY2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_0e4aababa44e7c791885d4a1008bee08
Files
-
JaffaCakes118_0e4aababa44e7c791885d4a1008bee08.exe windows:4 windows x86 arch:x86
1dc9c37ca1b0886716c274d1e03a2e4d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetStringTypeA
GlobalFindAtomA
CreateFileA
GetFileAttributesA
GetDiskFreeSpaceA
IsBadCodePtr
SetStdHandle
SetUnhandledExceptionFilter
IsBadReadPtr
GetEnvironmentStringsW
SetFilePointer
LCMapStringA
GetStringTypeW
FreeEnvironmentStringsW
EnumResourceNamesW
LCMapStringW
UnhandledExceptionFilter
FlushFileBuffers
GetThreadLocale
GetOEMCP
GetFullPathNameA
ReadFile
FreeEnvironmentStringsA
WriteFile
VirtualProtect
GetStringTypeExA
WideCharToMultiByte
GetCPInfo
GetEnvironmentStrings
FindFirstFileA
MulDiv
shlwapi
SHGetInverseCMAP
SHCreateStreamOnFileEx
PathAppendA
PathIsFileSpecA
PathIsContentTypeA
PathCreateFromUrlW
rpcrt4
RpcStringFreeA
Sections
.text Size: 83KB - Virtual size: 482KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ