Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_62bb40d3189dd88c1686013bb40a4c98.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_62bb40d3189dd88c1686013bb40a4c98.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_62bb40d3189dd88c1686013bb40a4c98
-
Size
202KB
-
MD5
62bb40d3189dd88c1686013bb40a4c98
-
SHA1
9ae8a631a162ea514f3e397c806b43781bc7124f
-
SHA256
4c0045013059f3870dbb5e2431ddf6a699249b9f2275f9d9ca8fdd02ecefbcc0
-
SHA512
c2956d0e35011cd0d34502285b547f787a49c2ffe42f745b522d4ed89e45a4c368c5000f19aabeb22574af9c2564c580b253753bfda8d3a4910e3c78cfd88f88
-
SSDEEP
3072:4CJHLdOXtyeHen1Kqix4N/aWFqkFmhmJZ4uySwhH5j13fXNLpYR//ohwwfYmk09l:xHLycnJP5q/MyXhH7l2//oBY2DmFU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_62bb40d3189dd88c1686013bb40a4c98
Files
-
JaffaCakes118_62bb40d3189dd88c1686013bb40a4c98.exe windows:4 windows x86 arch:x86
d8cc6cb682c25180cdc2dda4ff1dbc8d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
winmm
mciSendCommandA
sndPlaySoundA
ole32
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID
user32
FillRect
ReleaseCapture
IsWindow
ReleaseDC
GetWindowInfo
MoveWindow
GetSysColor
GetWindowLongA
SetWindowLongA
SetWindowPos
GetDlgItem
LoadCursorA
SetCursor
GetDC
SetCapture
oleacc
LresultFromObject
CreateStdAccessibleObject
kernel32
SetTapePosition
InterlockedExchange
ClearCommError
GetWindowsDirectoryA
Sleep
GetCurrentProcessId
EnumResourceNamesA
GetVersion
FatalExit
FindClose
GetLocalTime
FindFirstFileA
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
shell32
SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation
Sections
.text Size: 179KB - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lib Size: 512B - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ