Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_d032b2a990bafb82e3472c97101b14f3.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_d032b2a990bafb82e3472c97101b14f3
-
Size
173KB
-
MD5
d032b2a990bafb82e3472c97101b14f3
-
SHA1
35f5baa21c642933065fc32f862ff36d43f8c74b
-
SHA256
16efd532684c4624f8a73b14930d2ea72b291caa15b099331ab397a9c73bf752
-
SHA512
7dc3f7080084b3f325a07111f84bf1516b7bfa8ccad0a0cb3af6249ae05a5c04b166454781aadb8c543d82a897e73e1db9d09f0a44a2431a7a160795c649606e
-
SSDEEP
3072:bZh60ADfBVq4vl/PzAqKc135bdpZ+4vX57jNlzLNmyyIz1ifHJKy/crb5gGb/:bZbCz/NntKc135bvZ+4vX13zBmjIwpKv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_d032b2a990bafb82e3472c97101b14f3
Files
-
JaffaCakes118_d032b2a990bafb82e3472c97101b14f3.exe windows:4 windows x86 arch:x86
38fa185a9f0b1fa5c4f98f96489b868b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToSystemTime
GlobalAddAtomW
GetFullPathNameW
OutputDebugStringA
LeaveCriticalSection
CreateThread
lstrcpyA
IsDBCSLeadByte
Sleep
GetTimeZoneInformation
EnumResourceNamesA
SetEvent
DeleteCriticalSection
ResetEvent
VerLanguageNameA
EnterCriticalSection
InitializeCriticalSection
LoadLibraryA
GetFullPathNameA
WaitForSingleObject
GetTickCount
GetTempPathA
GetProcAddress
LoadLibraryW
FreeLibrary
winmm
mciSendCommandA
sndPlaySoundA
shlwapi
PathAddBackslashA
setupapi
InstallCatalog
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
msimg32
AlphaBlend
TransparentBlt
Sections
.text Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ