Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_1eb92c6a918c7f5bdce6dfdafe6b8411.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_1eb92c6a918c7f5bdce6dfdafe6b8411.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_1eb92c6a918c7f5bdce6dfdafe6b8411
-
Size
164KB
-
MD5
1eb92c6a918c7f5bdce6dfdafe6b8411
-
SHA1
2bda89cf5871ae9a62f7b3c575c1ae9dfb33fc59
-
SHA256
ade0e5801f4ff308ee39d0fbfdb34bf17805e793ed15cba7d316edea41867d82
-
SHA512
f3c4a87f9e12be454532de5da460b356b21e8a385ac6480976d05981c738bb40a862ed38e502d78d8175fa2f7fbba43c97c96f5984818537703354bb3056be0b
-
SSDEEP
3072:CWq4Z3ph6NvDRj11srQnrFM1lh9aQXPzsvJaoUvD2FjxXvJaRtKNh2v9SxzYdjN:CWq4xD6N7Rj1urorYPnssqLxajKD2v8e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_1eb92c6a918c7f5bdce6dfdafe6b8411
Files
-
JaffaCakes118_1eb92c6a918c7f5bdce6dfdafe6b8411.exe windows:4 windows x86 arch:x86
4be6be66aebab71c44b430405fc38a3d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetEnvironmentVariableW
GetCurrentProcess
FindResourceW
SetCurrentDirectoryW
ConvertFiberToThread
FileTimeToSystemTime
GetStringTypeW
SetThreadIdealProcessor
LocalFree
FindNextFileW
FreeLibrary
LocalFileTimeToFileTime
GetSystemDirectoryW
EnumResourceNamesW
FileTimeToLocalFileTime
GetLocalTime
FindClose
IsBadReadPtr
LoadResource
SetErrorMode
SystemTimeToFileTime
RegisterWaitForSingleObject
FindFirstFileW
LocalAlloc
CompareStringA
GetOEMCP
GetShortPathNameW
LCMapStringW
SearchPathW
user32
ReleaseCapture
GetCapture
ExcludeUpdateRgn
ValidateRect
EnableWindow
DestroyWindow
FlashWindow
IsWindowEnabled
SetCapture
ValidateRgn
InvalidateRgn
UpdateWindow
RealGetWindowClassA
IsWindow
GetUpdateRgn
Sections
.text Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imul Size: 512B - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ