Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_14c30127e0acc9fa6ea8a45eec151781.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_14c30127e0acc9fa6ea8a45eec151781
-
Size
188KB
-
MD5
14c30127e0acc9fa6ea8a45eec151781
-
SHA1
e45578c2f2337d81897550bd50d6952db6492dab
-
SHA256
23a764b9c69ce83aacf6ce92f8c878481f0acf02f324a5a01938cce172c994f5
-
SHA512
9ba77047c0a5b4d486f9d3cc34c3b7148c60412c59c2fb852dd231cd90149143df2f91b853054f8f90e26c16f37ef571bc94fcd40a5bc60710f162c813f5f25b
-
SSDEEP
3072:bjNiyF5DyhIFYd9rmM4n1XvudI1V+6rdj7xE3GSo3ln+xRf2RKoUY6u//Y7KoO:XNikFyCFYdUM3dIBr5i2Sa5KQAt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_14c30127e0acc9fa6ea8a45eec151781
Files
-
JaffaCakes118_14c30127e0acc9fa6ea8a45eec151781.exe windows:4 windows x86 arch:x86
ed52441ea76f8ab5bd95334433bdf0ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
shlwapi
StrRetToStrA
SHCreateStreamOnFileEx
PathAppendA
PathIsContentTypeA
PathIsFileSpecA
PathCreateFromUrlW
kernel32
GetFileAttributesW
VirtualProtect
lstrcmpiW
FindAtomA
GetModuleFileNameW
VirtualQuery
OutputDebugStringW
GetModuleHandleA
SetEnvironmentVariableW
OutputDebugStringA
LocalFree
WideCharToMultiByte
GetFileInformationByHandle
SearchPathW
EnumResourceLanguagesA
DuplicateHandle
LocalAlloc
CreateDirectoryW
GetCurrentThreadId
GetStringTypeExW
SetLastError
ExitProcess
lstrlenW
MultiByteToWideChar
GetCurrentProcess
GetCurrentDirectoryW
InterlockedExchange
oleacc
CreateStdAccessibleObject
Sections
.text Size: 95KB - Virtual size: 234KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ