Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_5c7539eb8bd4f1de9ee82d82fb579004.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_5c7539eb8bd4f1de9ee82d82fb579004.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_5c7539eb8bd4f1de9ee82d82fb579004
-
Size
226KB
-
MD5
5c7539eb8bd4f1de9ee82d82fb579004
-
SHA1
a14b51d2a28e6a87e1a70af3d1c509eb48e1ad29
-
SHA256
4e201af7f5247616567a18647dac8dc88189e98ef7aba65990cf2f6190ddea1d
-
SHA512
2d717942490de0aa5e01c01c44d2e982a725519e61dc4959c9147f8a959b3d212509b98734423d2b03b7bfb8d304043affd4b8c0d0cac0cd2ab33be084313e81
-
SSDEEP
3072:T7lEsddl6ynhIgTbAp2AatRdTj4LQvrcfHfQDihV2s5ZKaBu0cKe48PIQNLfAahy:2gPAYZm0r4f7VbHu2x6HNca3LQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_5c7539eb8bd4f1de9ee82d82fb579004
Files
-
JaffaCakes118_5c7539eb8bd4f1de9ee82d82fb579004.exe windows:4 windows x86 arch:x86
45dbdd094f594237fc81f51aedb46535
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
FreeResource
GetEnvironmentVariableA
GetOEMCP
SetEnvironmentVariableW
EnumResourceTypesA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetLastError
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetProcAddress
GetCPInfo
GetACP
VirtualAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
gdi32
DeleteObject
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 188KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE