Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_46e61b55174c83c383389850ac3eb4b5.exe
Resource
win7-20240708-en
General
-
Target
JaffaCakes118_46e61b55174c83c383389850ac3eb4b5
-
Size
273KB
-
MD5
46e61b55174c83c383389850ac3eb4b5
-
SHA1
41f9651e4a7a46bb90db9eb417e2c957a5f71577
-
SHA256
2e7fc0a389bc29d5102e3fb17d46ddb42575718df32a5d68a67972993f0cbe1e
-
SHA512
7914168708124753a0ec51a021cd85b859150e7ffbcada300c3b030225ef0618cdc07488b11a0562873cd22c4f7ea36c5458d08b77c9db500aa991658ac4fd08
-
SSDEEP
6144:t7wYVlIgvifJtX+hTJRaSSb4TomjGOKJ2QYQDc8qPm/X1Xe:tpVl1vOX+cS0KfKBcI9e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_46e61b55174c83c383389850ac3eb4b5
Files
-
JaffaCakes118_46e61b55174c83c383389850ac3eb4b5.exe windows:4 windows x86 arch:x86
97169552551456c7b0f13e6ccede7c3c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WritePrivateProfileStringW
GetAtomNameA
LockResource
DeleteCriticalSection
MultiByteToWideChar
Sleep
MulDiv
GetPrivateProfileStringW
GetPrivateProfileIntW
InitializeCriticalSection
lstrlenW
GlobalSize
GetModuleHandleW
FreeLibrary
EnumResourceTypesW
GetProcAddress
LoadResource
FindClose
GetModuleFileNameW
GetSystemDirectoryW
FindFirstFileW
GetVersionExA
GetTickCount
GetVersionExW
LoadLibraryW
LoadLibraryA
GetLocaleInfoW
newdev
UpdateDriverForPlugAndPlayDevicesW
oleacc
LresultFromObject
CreateStdAccessibleObject
CreateStdAccessibleProxyW
Sections
.text Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 142KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ