Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_46f38d9351f86672f187dae19f8d9c05.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_46f38d9351f86672f187dae19f8d9c05
-
Size
172KB
-
MD5
46f38d9351f86672f187dae19f8d9c05
-
SHA1
c94071bc1fb4dea1359c37afd654f6b03575dfca
-
SHA256
1ed95d7ca3ae50c4b3c1ca5e898dd6e3200aef61600e90d50fb664e995c30410
-
SHA512
9cb18bfbe88cfc47d58404b366a320b0e2fee1cf35aa556cfd24ad27211e4fde50e55a71337f880a217c68784e6a630769f175db57e4391eb180640e04d25609
-
SSDEEP
3072:V2R5YlLBjudfOoszM4Db1BS4rrqGxvtlFfSUxuZMqCGAFWf9Dr6v/RCn17mjF:V2vKBatOowb5rqYFnhiMXFKk/R876
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_46f38d9351f86672f187dae19f8d9c05
Files
-
JaffaCakes118_46f38d9351f86672f187dae19f8d9c05.exe windows:4 windows x86 arch:x86
e5b652ae4210870299861129cf0a8c41
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetModuleFileNameW
CreateMutexA
AddAtomW
InitializeCriticalSection
GetModuleFileNameA
ReadFile
GetCurrentProcessId
QueryPerformanceCounter
SetFileAttributesA
LocalFree
InterlockedIncrement
CreateFileA
lstrlenA
MultiByteToWideChar
DeleteCriticalSection
Sleep
DeviceIoControl
VirtualFree
GetLastError
GetSystemTime
EnumResourceNamesA
GlobalFree
SetFilePointer
GetFileAttributesA
GetCurrentThreadId
LocalAlloc
GetTempFileNameA
WideCharToMultiByte
CloseHandle
DeleteFileA
GetFileSize
GlobalLock
CheckNameLegalDOS8Dot3W
GetVersionExA
CopyFileA
WaitForSingleObject
GetSystemTimeAsFileTime
CreateDirectoryA
GetTickCount
DisableThreadLibraryCalls
GetVolumeInformationA
GlobalUnlock
ReleaseMutex
InterlockedDecrement
GetTempPathA
CreateFileW
FreeLibrary
setupapi
CM_Get_Child
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
advapi32
RegDeleteKeyA
RegQueryValueExA
RegEnumKeyA
RegOpenKeyA
RegQueryValueA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
lz32
LZClose
LZCopy
LZOpenFileA
Sections
.text Size: 90KB - Virtual size: 233KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ