Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_500f787662ae7c808173141fe95f4374.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_500f787662ae7c808173141fe95f4374.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_500f787662ae7c808173141fe95f4374
-
Size
179KB
-
MD5
500f787662ae7c808173141fe95f4374
-
SHA1
fd2cda3397652461308c1bbe7b9e9c27461ecf45
-
SHA256
7f840b737dc34568f350a71ecc58bcd3356f545cbc2c8cb9af706848ddee7b37
-
SHA512
02b1dde1fd3467dfb5dda8ff3d74f0381fd69d180408923dd80f276369d3fb04d7a4e4dcffed84af43a10a759f94b06dd13a2388dcf06ebee4d047d2a9ad4532
-
SSDEEP
3072:k/NM1R5szd7Uq0/Xd8N//5Wj4so9qdkI6AxYo9G/OBTUFtsdnpVYjP1mdBJb6YJD:kZu3lg5iO9qf6AjFNVMP1yBJWW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_500f787662ae7c808173141fe95f4374
Files
-
JaffaCakes118_500f787662ae7c808173141fe95f4374.exe windows:4 windows x86 arch:x86
41898052694e56c947f6f0eca45e37bf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetThreadPriority
HeapFree
DeleteCriticalSection
GetCurrentProcess
GetCPInfo
SetEndOfFile
IsValidCodePage
EnumSystemLocalesA
GetModuleHandleA
RtlUnwind
GetLastError
GetCommandLineA
InitializeCriticalSection
UnhandledExceptionFilter
HeapReAlloc
GetVersionExA
GetModuleFileNameW
SetCommConfig
WriteConsoleA
InterlockedIncrement
LeaveCriticalSection
HeapAlloc
LCMapStringA
LCMapStringW
GetCurrentThreadId
ExitProcess
WideCharToMultiByte
IsDebuggerPresent
GetFullPathNameW
EnumResourceNamesA
WriteFile
Sleep
ReadFile
SetUnhandledExceptionFilter
ExitProcess
RaiseException
GlobalAlloc
SetStdHandle
HeapSize
GetCurrentDirectoryW
GetProcAddress
CreateFileA
EnterCriticalSection
InterlockedDecrement
IsValidLocale
GetUserDefaultLCID
GetLocaleInfoW
GetConsoleOutputCP
GetProcessHeap
CloseHandle
TerminateProcess
WriteConsoleW
MultiByteToWideChar
GetFullPathNameA
rpcrt4
UuidCreate
advapi32
RegCreateKeyExW
RegCloseKey
RegSetValueExW
shell32
SHCreateDirectoryExW
SHFileOperationW
SHGetFolderPathW
user32
GetClassLongA
MessageBoxW
Sections
.text Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 512B - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ