Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_9a483f6c74011a966c3f2ffcc7b7acb9.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
JaffaCakes118_9a483f6c74011a966c3f2ffcc7b7acb9.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_9a483f6c74011a966c3f2ffcc7b7acb9
-
Size
181KB
-
MD5
9a483f6c74011a966c3f2ffcc7b7acb9
-
SHA1
60b06132cfcc80cdff6a9e11f228097a53666d53
-
SHA256
2694b536eab1f0d875feb1e9f7385c14699f35414c6ff15e44654cf123827b34
-
SHA512
17639ed021269b64331e06626185b6aa5f4f5a26e0942154f31a950de5948b84e1f4e19ebe778078a05aaa4b86a7a3deb88cee1f9830b7c44b62eb7218a60eea
-
SSDEEP
3072:yNI8PkdPGywP7dnDkjR2hxTmPuZ/UdGQ4OFM0fg8p/S8qtafhEs1rD2poKy:yNI7r6dna8TCuCdV4OFMSB88K7kXEoKy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_9a483f6c74011a966c3f2ffcc7b7acb9
Files
-
JaffaCakes118_9a483f6c74011a966c3f2ffcc7b7acb9.exe windows:4 windows x86 arch:x86
65556ea06a1f6ea07183fbd82b5031ee
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalGetAtomNameA
InitializeCriticalSection
GetPrivateProfileIntW
DeleteCriticalSection
GetPrivateProfileStringW
MulDiv
GetModuleFileNameW
GetVersionExA
Sleep
MultiByteToWideChar
LoadResource
GetProcAddress
FindFirstFileW
LockResource
EnumResourceTypesW
GlobalSize
GetModuleHandleW
LoadLibraryA
GetVersionExW
WritePrivateProfileStringW
IsDBCSLeadByteEx
LoadLibraryW
FindClose
GetTickCount
FreeLibrary
lstrlenW
GetLocaleInfoW
shell32
SHGetImageList
SHBrowseForFolderA
SHGetFileInfoA
SHFileOperationW
ShellExecuteExA
ShellExecuteW
ShellExecuteExW
SHGetFolderPathW
CommandLineToArgvW
SHGetPathFromIDListA
Shell_NotifyIconA
wininet
HttpQueryInfoA
InternetCrackUrlA
InternetCloseHandle
InternetReadFile
HttpSendRequestA
InternetConnectA
InternetOpenA
InternetErrorDlg
HttpOpenRequestA
InternetTimeToSystemTime
InternetTimeFromSystemTime
Sections
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ