Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_d4105ce3c50f94325221fa3ddba1ebd4.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_d4105ce3c50f94325221fa3ddba1ebd4.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_d4105ce3c50f94325221fa3ddba1ebd4
-
Size
178KB
-
MD5
d4105ce3c50f94325221fa3ddba1ebd4
-
SHA1
f9fc5322722215edcd9ed7a99e54c95fad9ce5a6
-
SHA256
4fbd044ae624ad60c6deb22f9d75c8b7f8511205702fd8699e9aa8ec4da480cf
-
SHA512
f79ef5b25d6774a6525c7925aee50ddfc8ca5e5f1f20bc50e09ea9856b16730dc407c35f7e6ebee019c9d760361827f7181a432b2a3447a5a8141273c9ffe270
-
SSDEEP
3072:B8PCh614n5S3CT+JdqnW9h8a97qL129m4UfnS4wSIrBtDTCLBj0RErY72uRBWp:Sq0inH6OQlu2E44SV6L6WrmhR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_d4105ce3c50f94325221fa3ddba1ebd4
Files
-
JaffaCakes118_d4105ce3c50f94325221fa3ddba1ebd4.exe windows:4 windows x86 arch:x86
e4535698206127d55518e55609b6e753
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
mprapi
MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName
user32
EnableWindow
DestroyWindow
FlashWindow
ValidateRect
SetCapture
GetCapture
IsWindowEnabled
ReleaseCapture
UpdateWindow
RealGetWindowClassA
ExcludeUpdateRgn
ValidateRgn
IsWindow
InvalidateRgn
GetUpdateRgn
kernel32
LCMapStringW
LocalFileTimeToFileTime
CreateFiberEx
LocalAlloc
FindFirstFileW
GetLocalTime
FindClose
GetSystemDirectoryW
SetThreadAffinityMask
SetErrorMode
SystemTimeToFileTime
IsBadReadPtr
SetCurrentDirectoryW
FileTimeToSystemTime
LoadResource
FileTimeToLocalFileTime
EnumResourceNamesW
SetThreadPriority
FindNextFileW
FindResourceW
GetOEMCP
GetCurrentProcess
CompareStringA
LocalFree
GetStringTypeW
FreeLibrary
GetShortPathNameW
SetEnvironmentVariableW
SearchPathW
Sections
.text Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imul Size: 512B - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ