Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_c78af955fdc7475df5c2907e2aa41ef5.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_c78af955fdc7475df5c2907e2aa41ef5.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_c78af955fdc7475df5c2907e2aa41ef5
-
Size
204KB
-
MD5
c78af955fdc7475df5c2907e2aa41ef5
-
SHA1
71172bf5885659c5192861f5bf3ca1079ecea650
-
SHA256
7c7d055be8d49ca1adc1d7c18b1a9f7d4946e31b1a8b083535eac9347d15e72a
-
SHA512
a7c4618f919babdcc3f0cc7b7519064d9244baecdabd20b93bb9fab63b644d80b542cdfc3ef2e1b3df4db586c81d112fbb9d82bec4dbc4da80fe496d02cdbb67
-
SSDEEP
3072:uKTdEtuQhDyviX/EEZLn/ncwj30NL/tdJfiSD39ZCD49f5VYS62A0KT3a9OO1H:uNtuQhDxHZrcQMnpJ8Mf56S6cm3a9O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_c78af955fdc7475df5c2907e2aa41ef5
Files
-
JaffaCakes118_c78af955fdc7475df5c2907e2aa41ef5.exe windows:4 windows x86 arch:x86
a294ea4cc1b98facc7cb0a36c719b5bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvfw32
ICInfo
imagehlp
ImageNtHeader
ImageGetDigestStream
ImageRvaToVa
ImageDirectoryEntryToData
advapi32
CryptReleaseContext
CryptHashData
CryptAcquireContextA
CryptCreateHash
CryptGetHashParam
CryptDestroyHash
user32
CharNextA
wsprintfW
MonitorFromWindow
CharNextW
kernel32
CreateFiberEx
RemoveDirectoryA
GetOEMCP
SetFileAttributesA
LoadLibraryExW
EndUpdateResourceW
OutputDebugStringA
GetFileAttributesW
EscapeCommFunction
UpdateResourceW
CopyFileA
RemoveDirectoryW
LoadLibraryExA
ReadFile
GetFullPathNameW
FindClose
EnumResourceNamesW
CreateDirectoryW
CopyFileW
FreeLibrary
SetFileAttributesW
DeleteFileW
FatalExit
BeginUpdateResourceW
AreFileApisANSI
lstrlenA
GetFullPathNameA
CreateDirectoryA
DebugBreak
GetFileAttributesA
DeleteFileA
GetFileInformationByHandle
shell32
CommandLineToArgvW
psapi
GetProcessMemoryInfo
Sections
.text Size: 178KB - Virtual size: 177KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lib Size: 512B - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ