Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_cb57f5c1774c5b6a2702567d1d52bdbc.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_cb57f5c1774c5b6a2702567d1d52bdbc
-
Size
184KB
-
MD5
cb57f5c1774c5b6a2702567d1d52bdbc
-
SHA1
75910aecdefea29025c28c17b9e8f95d9dbf1439
-
SHA256
2c7c26149256cfe741f13da3782aeb6be0ca38d93f0479476f2d76d4093a48a8
-
SHA512
17165050437e30e5b924391a268e309103d1d668254fd7d019db6a141dc6b8da88a25e6a084b389745750ea992bc7ef0fd5c6cb0c23aa7825153e48a81bccfbd
-
SSDEEP
1536:qiaiUk2Va0vwZzRXk1OJjV5OcI/j6/ju2yjEoXJKXX0JSkRxWMSC7jGNGlVZ:qTdkMa8usOxTBI/j6/aBI8uiSiZjG4l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_cb57f5c1774c5b6a2702567d1d52bdbc
Files
-
JaffaCakes118_cb57f5c1774c5b6a2702567d1d52bdbc.exe windows:4 windows x86 arch:x86
235e4caf15754b2c090efe8bf5146912
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToLocalFileTime
SetEnvironmentVariableA
InitializeCriticalSection
HeapAlloc
GetStdHandle
GetUserDefaultLCID
GetVersionExA
VirtualFree
LoadLibraryA
FindClose
GetLocaleInfoA
IsValidLocale
LCMapStringW
lstrcpynA
GetLocalTime
GetFileAttributesA
FileTimeToSystemTime
GetDriveTypeA
GetSystemTime
GetStringTypeW
HeapFree
ReleaseMutex
GetLocaleInfoW
GetUserDefaultUILanguage
lstrlenA
GetModuleFileNameA
WaitForSingleObject
GetModuleHandleExW
SetConsoleMode
GetShortPathNameA
SetVolumeLabelA
LocalUnlock
CreateMutexA
GetCurrentProcess
SetConsoleCtrlHandler
ExitProcess
WideCharToMultiByte
GetFileTime
GetConsoleMode
GetFileType
SetHandleCount
IsValidCodePage
InterlockedExchange
GetEnvironmentVariableA
FindFirstFileA
CompareStringW
HeapDestroy
GetProcAddress
GetConsoleScreenBufferInfo
SetStdHandle
HeapCreate
LeaveCriticalSection
GetFullPathNameA
GetStringTypeA
VirtualAlloc
GetTimeZoneInformation
GetModuleHandleA
LCMapStringA
GetDriveTypeA
CompareStringA
GetStartupInfoA
SetThreadPriorityBoost
GetProcessHeap
GlobalFlags
CreateFileA
FindNextFileA
lstrcmpiA
FindVolumeClose
GetVolumeInformationA
EnumSystemLocalesA
shlwapi
SHDeleteValueA
PathFileExistsW
PathRemoveBackslashA
shell32
SHGetSpecialFolderPathW
ShellExecuteExA
ExtractIconExA
ole32
OleUninitialize
CoCreateInstance
OleInitialize
urlmon
CreateURLMoniker
user32
EnableWindow
GetParent
DrawTextA
CharPrevA
SystemParametersInfoA
DestroyWindow
LoadIconA
GetDlgItem
RegisterClassA
GetWindowTextA
PostQuitMessage
LoadBitmapA
EndDialog
CharNextA
GetDlgItemTextA
ScreenToClient
LoadCursorA
FillRect
SendDlgItemMessageA
SetRect
BeginPaint
IsWindowVisible
SetDlgItemTextA
CreateDialogParamA
GetWindowRect
SetWindowPos
EndPaint
SetClassLongA
GetDesktopWindow
GetClientRect
gdi32
IntersectClipRect
SelectObject
SetBkColor
CreatePen
OffsetClipRgn
GetClipRgn
GetNearestColor
SetTextColor
GetStockObject
CreateRectRgn
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 168KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jnxatui Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ybnqdvi Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
enzapmx Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE