Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_479ea8b11346420de25822a11bcd87f6.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_479ea8b11346420de25822a11bcd87f6.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_479ea8b11346420de25822a11bcd87f6
-
Size
155KB
-
MD5
479ea8b11346420de25822a11bcd87f6
-
SHA1
ac90a938fd1e3433167f7ebbed91093433299d0d
-
SHA256
6f617912ffd5ebe4c38bd0b94ddc8d068f87f576ffcc5f806bf5c17b43996a3b
-
SHA512
f7726abf85d180b1101d6f91735a878ba8102ac66da87f9324b53fa6f6b22b41b86071ec78f19ae3c55a8af954b8f417f7a1773946a3c9450ddafc90cea13587
-
SSDEEP
3072:6pfbUSOAOmhjliEjsbT0771y3cE7dxNHinaYnodyJXw8XYrwclwEBm:KROAO9Ejc871WdTHinaEoOFXYrwr8m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_479ea8b11346420de25822a11bcd87f6
Files
-
JaffaCakes118_479ea8b11346420de25822a11bcd87f6.exe windows:4 windows x86 arch:x86
9055565650f53167b2c7607c5b8edf90
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
oleacc
LresultFromObject
CreateStdAccessibleObject
ole32
CoTaskMemRealloc
CoTaskMemFree
CoUninitialize
CoInitialize
CoCreateInstance
StringFromGUID2
CoRegisterClassObject
CoRevokeClassObject
CoTaskMemAlloc
StringFromCLSID
advapi32
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
user32
DispatchMessageW
KillTimer
wsprintfW
PostThreadMessageW
SetTimer
SendMessageA
CharUpperW
TranslateMessage
CharNextW
GetDC
GetMessageW
UnregisterClassA
kernel32
GetACP
GlobalFree
lstrcpyA
lstrlenW
InitializeCriticalSection
LockResource
GetProcessId
FindClose
GetLastError
GetTickCount
lstrcmpiW
lstrcpyA
EnumResourceNamesW
OutputDebugStringW
FreeEnvironmentStringsW
GetCPInfo
lstrcpyW
MultiByteToWideChar
GlobalAlloc
WideCharToMultiByte
CreateFileMappingW
GetModuleHandleW
shlwapi
PathCombineW
PathFileExistsW
Sections
.text Size: 97KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.isete Size: 1024B - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ