Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_5c4bc26caed4fbeca8026e18b58eb0d9.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_5c4bc26caed4fbeca8026e18b58eb0d9
-
Size
556KB
-
MD5
5c4bc26caed4fbeca8026e18b58eb0d9
-
SHA1
b325151aa6e6ba2155c4b81e51fa36aea9e62588
-
SHA256
6985bcee389298aeeb0fdf6067f48749c309cd97750d41dfb192f4cfbc96b54b
-
SHA512
992131fa20161a0a22fdc1fb0d7e34fb268aa7aedce9c7e6a2ff5501edea01447ab77b926323733413ad74d133d4d1eee78f4ae2fa4dc404891af2fd749e4c10
-
SSDEEP
12288:I9cONi+mj169epUzdmpN2aAbFc0G+lZs8EmShYPtZww4M76kSA4drG:YvNi+m1Oz4po5c0G+lefJhY/wW7ZAQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_5c4bc26caed4fbeca8026e18b58eb0d9
Files
-
JaffaCakes118_5c4bc26caed4fbeca8026e18b58eb0d9.exe windows:4 windows x86 arch:x86
b0c608d35548d14ddebf7a72f8c4aad8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DuplicateHandle
ExitProcess
GetCPInfo
GetModuleHandleA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
setupapi
SetupBackupErrorW
SetupDiCreateDeviceInterfaceRegKeyW
SetupDiGetINFClassA
SetupCloseLog
user32
GetKeyState
GetKeyboardType
MessageBoxExW
RegisterClipboardFormatA
GetClipboardFormatNameA
RegisterDeviceNotificationW
ReleaseCapture
ToAsciiEx
ValidateRgn
VkKeyScanExW
EnumDesktopsW
EnumDesktopsA
RegisterDeviceNotificationA
EnumClipboardFormats
GetCaretPos
msvcrt
wcslen
exit
_cexit
__p__commode
Sections
.text Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rata Size: 189KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE