Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_0faad919cdd4bc202671d56c04c86c46.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
JaffaCakes118_0faad919cdd4bc202671d56c04c86c46.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_0faad919cdd4bc202671d56c04c86c46
-
Size
164KB
-
MD5
0faad919cdd4bc202671d56c04c86c46
-
SHA1
392aff9fe4f5cb827412031e368eba6245695539
-
SHA256
6f8434320195aa2059147916ae9e8189c326bd90f3601f999edeb27a9882bf3e
-
SHA512
f182910352cfe505aa58fc4d0f3b81bf94ae255c7179b8e133439014736d2cdea5c1619db8d3501a50588f99c0adb00e098678da6c565694198f250f657de8a6
-
SSDEEP
3072:nTP7cQE4Fsh+vF9jTioIydg8RbANYwfYAK8CqQab2aa940Wc:nr7rvjPWoTkHRfQabjq/W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_0faad919cdd4bc202671d56c04c86c46
Files
-
JaffaCakes118_0faad919cdd4bc202671d56c04c86c46.exe windows:4 windows x86 arch:x86
9f04ed2dec76735fc21553071b589098
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
WriteConsoleInputVDMA
SearchPathW
GetProcessHandleCount
GetFullPathNameW
EnumResourceNamesA
FreeEnvironmentStringsW
MoveFileW
CompareFileTime
GetShortPathNameW
SetFileTime
shell32
CommandLineToArgvW
SHGetFolderPathW
ShellExecuteW
SHFileOperationW
ShellExecuteExW
ole32
CoInitializeEx
CoUninitialize
CoTaskMemAlloc
CreateStreamOnHGlobal
CoTaskMemFree
CoCreateInstance
CoInitialize
oleacc
LresultFromObject
CreateStdAccessibleObject
user32
SetWindowTextW
IsWindow
LoadIconW
DestroyWindow
CreateCursor
GetFocus
ReleaseDC
PostQuitMessage
GetDlgCtrlID
GetDC
IsDlgButtonChecked
PostMessageW
SetWindowLongW
GetWindowModuleFileNameW
MsgWaitForMultipleObjects
comctl32
PropertySheetW
shlwapi
PathAppendW
PathRemoveFileSpecW
PathCombineW
SHGetValueW
PathFileExistsW
Sections
.text Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idive Size: 1024B - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ