Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_58f649425ecfec93107f84617a0233ac.exe
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_58f649425ecfec93107f84617a0233ac
-
Size
278KB
-
MD5
58f649425ecfec93107f84617a0233ac
-
SHA1
0ef1e73b5305c83e8fd81d1496838833c2b48e41
-
SHA256
138e589c03b3b545c95f5b9280d63a3c11880403dc1a9b9f57d5c1f2be9baa2c
-
SHA512
341f56d2f0b604b6d007a599ff84f6fa71f89847486eefe9c13e21272e4e8e5f84b3a210e48d003aac9bc632dcc9966c90b84524bf8fcea4edea7c418d10f588
-
SSDEEP
6144:jH/EnxM9sHtD+reoVQaNFPCyaE9vkvslR/yr8s0S:jeM9AA9Vv7PClE9vk6R/yIs0S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_58f649425ecfec93107f84617a0233ac
Files
-
JaffaCakes118_58f649425ecfec93107f84617a0233ac.exe windows:4 windows x86 arch:x86
ccd4895f8ea26351c8b4fe3981908b56
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
CloseHandle
GetFullPathNameA
UnhandledExceptionFilter
WideCharToMultiByte
lstrcatA
GetCPInfo
AddAtomA
GetStringTypeW
lstrcmpA
DeleteCriticalSection
SetFilePointer
LeaveCriticalSection
GetEnvironmentStringsW
ReadFile
FreeEnvironmentStringsW
InitializeCriticalSection
lstrcmpiA
CreateFileA
LCMapStringW
GetEnvironmentStrings
EnterCriticalSection
LoadLibraryA
GetCurrentThreadId
EnumResourceNamesW
MultiByteToWideChar
GetFileAttributesA
SetStdHandle
lstrcpyA
FindFirstFileA
IsBadReadPtr
GetOEMCP
IsBadCodePtr
GetProcAddress
SetDllDirectoryW
GetModuleHandleA
SetUnhandledExceptionFilter
FreeEnvironmentStringsA
VirtualProtect
Sleep
MulDiv
LCMapStringA
GetStartupInfoA
FreeLibrary
lstrlenA
GetThreadLocale
FlushFileBuffers
GetTickCount
lstrcpynA
GetDiskFreeSpaceA
WriteFile
GetLastError
RaiseException
setupapi
CM_Get_Child
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
Sections
.text Size: 144KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ