Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_cfd2b8d0aee4f09a5da6df079689f964.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_cfd2b8d0aee4f09a5da6df079689f964
-
Size
179KB
-
MD5
cfd2b8d0aee4f09a5da6df079689f964
-
SHA1
804b4d0028bc6a26e76200e2c4afcc4d450dd916
-
SHA256
16531f09b5377d22c63c4e8b0f57d13656ada9b7f388e09063d9b6d4af1022c0
-
SHA512
92264e37b659c763bdd120a3e335f132d1901d75482f9a3bd2dc7995cd23fc3668c8c15ca8f3fd2b50aa56e93c782199e65a0ea4578b3446b3df46ee55d3c2b7
-
SSDEEP
3072:PHGy2UeUeYyIkOFvxdbkXdJbVMALYdsRkCU/lbMlcqJ66Gk+flaXB:PGy4UeaGXd/LKfCcMlRJqvfgXB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_cfd2b8d0aee4f09a5da6df079689f964
Files
-
JaffaCakes118_cfd2b8d0aee4f09a5da6df079689f964.exe windows:4 windows x86 arch:x86
6fc15a47bfca2f3cdf4c9a75075e64f5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenEventA
GetAtomNameA
VirtualFree
SystemTimeToFileTime
Sleep
LocalFree
HeapAlloc
GetCurrentProcess
ResetEvent
SystemTimeToTzSpecificLocalTime
GetEnvironmentVariableA
HeapFree
GetSystemTime
CompareFileTime
EnumResourceTypesW
GetTickCount
WriteFile
GetSystemDirectoryW
GetCurrentProcessId
LoadLibraryA
SetFilePointer
GetProcAddress
SetEvent
GetSystemInfo
GetTempPathA
CreateThread
CreatePipe
newdev
UpdateDriverForPlugAndPlayDevicesW
oleacc
LresultFromObject
CreateStdAccessibleObject
CreateStdAccessibleProxyW
Sections
.text Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ