Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_cb119a6b42da7bba1b6151f2e0bd6f1e.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_cb119a6b42da7bba1b6151f2e0bd6f1e.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_cb119a6b42da7bba1b6151f2e0bd6f1e
-
Size
523KB
-
MD5
cb119a6b42da7bba1b6151f2e0bd6f1e
-
SHA1
d24065f78cbef5a9ae8cd898202b0c0b621059fc
-
SHA256
60c69015a52ab0edd4245671fbe2cdb8d2cd8ec1db66e904f8039b7ee770ed3b
-
SHA512
235172da6120853d3d1e6e3ed3123bcbe2517dc2f8390e62f59b3f15415e1afd04f22f263e1d7e1949d4b9170c62ed0b1373ac95e11a0f97e1f0a9ca84f446cf
-
SSDEEP
12288:jwTIx3EovSNq63oXcMGBdVhPo1esAT0ysDC8:jw0REovSNqSkGBdVdo1TCtAC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_cb119a6b42da7bba1b6151f2e0bd6f1e
Files
-
JaffaCakes118_cb119a6b42da7bba1b6151f2e0bd6f1e.exe windows:4 windows x86 arch:x86
5e87401f1b22e0b0a32b19199394ad19
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
CloseHandle
WriteFile
CreateFileA
GetModuleHandleA
lstrcmpiA
GetProcAddress
LoadLibraryA
lstrlenW
GetSystemPowerStatus
LCMapStringW
LCMapStringA
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
SetEnvironmentVariableA
GetOEMCP
GetACP
ExpandEnvironmentStringsA
FindResourceA
FlushViewOfFile
WideCharToMultiByte
LoadResource
HeapAlloc
RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
GetLastError
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
RaiseException
HeapFree
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
FlushFileBuffers
SetStdHandle
SetUnhandledExceptionFilter
MultiByteToWideChar
GetCPInfo
CompareStringA
CompareStringW
user32
LoadImageA
SetCursorPos
FindWindowA
GetScrollPos
GetClientRect
DefWindowProcA
GetDC
ReleaseDC
gdi32
GetDeviceCaps
DeleteObject
advapi32
GetUserNameA
Sections
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 51KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 465KB - Virtual size: 465KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ