Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_42ef2a4aad043117da75041fd50f6959.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_42ef2a4aad043117da75041fd50f6959.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_42ef2a4aad043117da75041fd50f6959
-
Size
212KB
-
MD5
42ef2a4aad043117da75041fd50f6959
-
SHA1
3dab976c7b911f26c900ddea2b437002c606c8ed
-
SHA256
a4580a57891368aaacdfd05cd974f598d4b53efaf9e026f73e997bfcb75099ca
-
SHA512
5e8997f63a912e21e33ad7489397cd43409065463a373db2d4ab3971a64c670b99f1f9484863ee93be04dcd1d1b331f0bc86a91e34e2411a2eff0d1f1bc9b735
-
SSDEEP
6144:nLMOdSe0hCAqxcQm63mu3JAfys1QAv//3Ub5JJ:oO30hBqyQmG327XUbJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_42ef2a4aad043117da75041fd50f6959
Files
-
JaffaCakes118_42ef2a4aad043117da75041fd50f6959.exe windows:4 windows x86 arch:x86
c146454c2e483ee64a14596289d8e66f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
ole32
CoCreateInstance
StringFromGUID2
GetRunningObjectTable
StgIsStorageFile
BindMoniker
CoTaskMemAlloc
StgOpenStorage
CreateBindCtx
CoTaskMemFree
CreateItemMoniker
CoUninitialize
StgCreateDocfile
CoInitialize
iphlpapi
GetAdaptersInfo
GetBestInterface
SendARP
advapi32
CryptHashData
CryptDestroyKey
RegDeleteValueA
CryptImportKey
RegEnumKeyExA
CryptGetHashParam
GetUserNameA
RegSetValueExA
RegOpenKeyExA
CryptEncrypt
CryptReleaseContext
CryptDestroyHash
RegQueryValueExA
CryptCreateHash
RegCreateKeyExA
RegEnumValueA
RegCloseKey
user32
DestroyWindow
GetQueueStatus
RealGetWindowClassA
PostThreadMessageA
MsgWaitForMultipleObjects
PeekMessageA
GetDesktopWindow
RegisterWindowMessageA
ReleaseDC
ShowWindow
GetDC
wsprintfA
CreateDialogParamA
DispatchMessageA
wvsprintfA
shell32
SHGetSpecialFolderPathW
SHGetSpecialFolderPathA
gdi32
CreateDIBitmap
wininet
InternetOpenUrlA
InternetCloseHandle
InternetReadFile
InternetOpenA
setupapi
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
winmm
timeGetTime
timeSetEvent
kernel32
VirtualQuery
InterlockedDecrement
QueryPerformanceCounter
SetLastError
FreeLibrary
QueryDosDeviceA
CreateThread
GetModuleFileNameA
InterlockedIncrement
GetComputerNameA
CreateFiberEx
GetTempPathA
CloseHandle
GetCurrentThreadId
CompareStringA
GlobalMemoryStatus
SetThreadPriority
GetCurrentProcessId
WriteFile
GetDevicePowerState
GetLastError
DeleteCriticalSection
GetDiskFreeSpaceA
SetEvent
DefineDosDeviceA
lstrlenA
GetSystemTime
GetVersionExA
LocalFree
CreateEventA
DeviceIoControl
ResetEvent
EnumResourceNamesW
LoadLibraryExA
OutputDebugStringA
GetWindowsDirectoryA
VirtualAlloc
GetPrivateProfileStringA
GetSystemDirectoryA
GetACP
CreateSemaphoreA
GetFileAttributesA
_llseek
GetTickCount
LocalAlloc
GetCurrentThread
LoadLibraryA
InitializeCriticalSection
GetSystemInfo
CreateProcessA
GetVersion
VirtualFree
IsBadReadPtr
GetThreadPriority
CreateMutexA
WaitForMultipleObjects
FlushFileBuffers
EnterCriticalSection
DeleteFileA
IsBadWritePtr
LeaveCriticalSection
InterlockedExchange
ReadFile
CreateFileA
WaitForSingleObject
GetModuleHandleA
GetLocaleInfoA
GetLocalTime
FlushInstructionCache
CreateDirectoryA
Sleep
ReleaseMutex
Sections
.text Size: 186KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ