Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_366ca8a405fff66f885da63784adc722.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_366ca8a405fff66f885da63784adc722.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_366ca8a405fff66f885da63784adc722
-
Size
175KB
-
MD5
366ca8a405fff66f885da63784adc722
-
SHA1
63e289bebd49c1015f6f1704ba19efa1e353934e
-
SHA256
ae1265ca7251abf4bff9c93127c0f4697396e9d19d2c8c771ecb070541902ba7
-
SHA512
7ce529150349c4ca4b6166c561d604ab339f6e1b2fd7117673d2380fb3a7f9fc962c9a7388c253aa37bd5c533c1fd9452d8f3ef71c13f7e05bbb7b58957f4a93
-
SSDEEP
3072:MhUAPGWlyhLE0aA0x3Sg3AJL4hN08T6/CP5hLZ4OUdpAayChQ0w4Gxe1TGyUyZNn:aUiGeyhLEmZoN08T+Cr9ZUoQUeVGy7Zh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_366ca8a405fff66f885da63784adc722
Files
-
JaffaCakes118_366ca8a405fff66f885da63784adc722.exe windows:4 windows x86 arch:x86
2af4dea01ee97d31c850a7331cf22fd8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
UnhandledExceptionFilter
WriteConsoleA
EnumSystemLocalesA
GetCommandLineA
InterlockedDecrement
WriteConsoleW
GetFullPathNameW
GetThreadPriority
HeapReAlloc
GetUserDefaultLCID
GetCurrentDirectoryW
GetModuleHandleA
InterlockedIncrement
EnterCriticalSection
SetStdHandle
MultiByteToWideChar
GetModuleFileNameW
SetCommConfig
SetUnhandledExceptionFilter
HeapFree
GetCurrentProcess
GetConsoleOutputCP
GetLastError
EnumResourceNamesA
GlobalAlloc
IsValidCodePage
CreateFileA
GetCurrentThreadId
IsDebuggerPresent
ReadFile
WriteFile
RaiseException
GetCPInfo
HeapSize
GetLocaleInfoW
LeaveCriticalSection
CloseHandle
ExitProcess
ExitProcess
LCMapStringW
IsValidLocale
DeleteCriticalSection
HeapAlloc
LCMapStringA
TerminateProcess
InitializeCriticalSection
Sleep
WideCharToMultiByte
SetEndOfFile
GetProcAddress
GetVersionExA
GetProcessHeap
RtlUnwind
GetFullPathNameA
shell32
SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW
advapi32
RegCreateKeyExW
RegCloseKey
RegSetValueExW
rpcrt4
UuidCreate
user32
GetClassLongA
MessageBoxW
Sections
.text Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 512B - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ