Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_96ca09f7b8c59df3f343631eeeaa7a7c.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_96ca09f7b8c59df3f343631eeeaa7a7c.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_96ca09f7b8c59df3f343631eeeaa7a7c
-
Size
185KB
-
MD5
96ca09f7b8c59df3f343631eeeaa7a7c
-
SHA1
e591fb9c93e47236b65719ecfc19ddebf2fe910f
-
SHA256
a37d758d3db9105eea47945d8f5bcff64ae74378296b37bcce2efd482cdc38fb
-
SHA512
4351db80a4b2f3ca0ecb90f5858cb57b1b7815ede4993173a77e3f6c5e0255621b819f6af820ba82755c14d69c5c8a1d357c57a063a2e2aa6da8621af46a0495
-
SSDEEP
3072:mdgwdN3lgAaLaRMn6e4swtF/vcl8X4spcUAqq1fUIRGlj0jUw2I5rc3Raa9:RY3iAaL0cEt9cXspHFyVGlm2Ia3Raa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_96ca09f7b8c59df3f343631eeeaa7a7c
Files
-
JaffaCakes118_96ca09f7b8c59df3f343631eeeaa7a7c.exe windows:4 windows x86 arch:x86
6ceb8d88e92d4280a5171993febccdb0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
GetClassLongA
MessageBoxW
shell32
SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW
kernel32
InitializeCriticalSection
GetModuleFileNameW
EnterCriticalSection
GetThreadPriority
SetUnhandledExceptionFilter
GetLocaleInfoW
IsValidLocale
CloseHandle
GetCurrentProcess
ExitProcess
LeaveCriticalSection
GetCurrentDirectoryW
TerminateProcess
SetEndOfFile
SetCommConfig
GetModuleHandleA
Sleep
GetCommandLineA
GetUserDefaultLCID
SetStdHandle
WriteFile
HeapFree
DeleteCriticalSection
GetVersionExA
GlobalAlloc
EnumResourceNamesA
LCMapStringW
GetCurrentThreadId
UnhandledExceptionFilter
RaiseException
InterlockedIncrement
GetLastError
WriteConsoleA
MultiByteToWideChar
CreateFileA
GetProcAddress
ExitProcess
LCMapStringA
GetConsoleOutputCP
EnumSystemLocalesA
GetProcessHeap
HeapReAlloc
RtlUnwind
IsDebuggerPresent
HeapAlloc
GetFullPathNameW
WriteConsoleW
ReadFile
WideCharToMultiByte
HeapSize
GetCPInfo
InterlockedDecrement
IsValidCodePage
GetFullPathNameA
rpcrt4
UuidCreate
advapi32
RegCreateKeyExW
RegCloseKey
RegSetValueExW
ole32
CoUninitialize
CoInitialize
CoCreateInstance
StringFromGUID2
CoCreateGuid
CoSetProxyBlanket
Sections
.text Size: 159KB - Virtual size: 159KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 512B - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ