Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_cfab3eabefc57c89260df28a862ba93c.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_cfab3eabefc57c89260df28a862ba93c.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_cfab3eabefc57c89260df28a862ba93c
-
Size
180KB
-
MD5
cfab3eabefc57c89260df28a862ba93c
-
SHA1
9ed96cd62792b592790515825ac8fb2d7c9249e9
-
SHA256
6c7cdd1c62cef41160ca49712ff92ac8c3d6538ff26c1eac29770a79c2cc3698
-
SHA512
e19ece17f744403aa3ee7609b4cb258cbab686e3f0dd7e08632c137baaf0992007473e5833cbd45ccab460ff2c37046df14cd8f4a6f8e5ac11dd430c87e520a1
-
SSDEEP
3072:4S9cjd689a5Z6H9wCtm7sIrQebXBQAS2ge4h1c3FrixOFla+xwZ:4hd66F9wGm7V+hbe4h1Etraa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_cfab3eabefc57c89260df28a862ba93c
Files
-
JaffaCakes118_cfab3eabefc57c89260df28a862ba93c.exe windows:4 windows x86 arch:x86
29be1e6042dc05bb153eadd586cdbd9c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
clusapi
CloseCluster
kernel32
lstrlenW
EnterCriticalSection
GetLongPathNameW
FindResourceA
lstrlenA
GetVersion
InitializeCriticalSection
GetFileAttributesA
lstrcatA
DisableThreadLibraryCalls
IsBadWritePtr
InterlockedIncrement
SetThreadContext
GetProcAddress
HeapAlloc
lstrcpynA
HeapFree
GetModuleFileNameA
LoadResource
EnumResourceTypesA
LeaveCriticalSection
InterlockedDecrement
lstrcpyA
GetWindowsDirectoryA
LoadLibraryA
ExitProcess
HeapReAlloc
LockResource
DeleteCriticalSection
GetProcessHeap
MultiByteToWideChar
WideCharToMultiByte
GetLocaleInfoA
user32
DefWindowProcA
CharNextA
ReleaseDC
SetDlgItemTextA
UnregisterClassA
OffsetRect
SetWindowLongA
EndPaint
GetWindowRect
GetKeyState
GetDC
MoveWindow
GetDlgItem
PtInRect
LoadAcceleratorsA
BeginPaint
DestroyWindow
SetWindowRgn
IntersectRect
EqualRect
GetActiveWindow
SetFocus
SetParent
Sections
.text Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1024B - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ