Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_0b539d23564f43f77e674f426f76b42a.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_0b539d23564f43f77e674f426f76b42a.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_0b539d23564f43f77e674f426f76b42a
-
Size
1.4MB
-
MD5
0b539d23564f43f77e674f426f76b42a
-
SHA1
c9c23bc2d4f2272a85fc1dc21b643a54f5c963af
-
SHA256
a97838413b9b5bba3713cf4b5a2078983c3d641ce6e74cf94ce2f0f16d30a2a8
-
SHA512
bee0d9c8d156a1167238a69391395e5add7b70d4263ce3f79de127744400da5fdf3eff858124504fbcc36bd6de4ba4fc0a4207d75895bf128e5b8193e66f3bd0
-
SSDEEP
24576:Yrz+Ka7klyytod7ybjePYpE640xUJSNdxWhfjaklDRfIcu5Ic+EXp0I/UkTTiKLm:Yf+mUpd+by6E6nPxE/lD5IcuWnqpgk3m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_0b539d23564f43f77e674f426f76b42a
Files
-
JaffaCakes118_0b539d23564f43f77e674f426f76b42a.exe windows:4 windows x86 arch:x86
c1ad8aec2439a1fa7a3ec8cd2d128885
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
CreateThread
Sleep
MultiByteToWideChar
WideCharToMultiByte
CompareFileTime
FindClose
FindFirstFileW
GetFileAttributesW
CreateDirectoryW
ExpandEnvironmentStringsW
lstrlenA
WriteFile
GetStdHandle
lstrcmpW
GetSystemTimeAsFileTime
lstrlenW
RemoveDirectoryW
FindNextFileW
DeleteFileW
VirtualAlloc
VirtualFree
GetACP
GetOEMCP
GetModuleHandleW
GetUserDefaultUILanguage
GetUserDefaultLCID
GetTempPathW
SetEnvironmentVariableW
SetCurrentDirectoryW
CloseHandle
lstrcmpiW
GetExitCodeThread
GetCommandLineW
GetVersionExW
CreateFileW
GetDriveTypeW
GetProcAddress
LoadLibraryA
MulDiv
GetSystemDirectoryW
TerminateThread
ResumeThread
SuspendThread
LocalFree
lstrcpyW
FormatMessageW
DeleteCriticalSection
GetFileSize
SetFilePointer
ReadFile
SetFileTime
SetEndOfFile
LeaveCriticalSection
EnterCriticalSection
WaitForMultipleObjects
CreateEventW
SetEvent
ResetEvent
InitializeCriticalSection
GetModuleHandleA
GetLocalTime
SystemTimeToFileTime
GetLastError
SetLastError
GetModuleFileNameW
SetFileAttributesW
GetStartupInfoA
user32
CharUpperW
DestroyWindow
KillTimer
CreateWindowExW
DispatchMessageW
GetMessageW
wvsprintfW
GetSystemMenu
SendMessageW
EnableMenuItem
GetWindowTextW
DefWindowProcW
CallWindowProcW
GetWindowDC
DrawIconEx
MessageBeep
SetWindowTextW
DialogBoxIndirectParamW
GetWindow
GetParent
GetClientRect
ClientToScreen
GetWindowTextLengthW
SetWindowPos
GetDC
DrawTextW
ReleaseDC
ShowWindow
GetWindowRect
ScreenToClient
LoadIconW
LoadImageW
SetDlgItemTextW
SystemParametersInfoW
GetSystemMetrics
GetDlgItem
SetTimer
GetWindowLongW
SetWindowLongW
GetKeyState
MessageBoxA
wsprintfA
wsprintfW
EndDialog
SetFocus
gdi32
DeleteObject
SelectObject
GetDeviceCaps
GetObjectW
CreateFontIndirectW
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
SHGetFileInfoW
ShellExecuteW
SHGetSpecialFolderPathW
ShellExecuteExW
ole32
CoCreateInstance
CoInitialize
oleaut32
SysAllocString
VariantClear
msvcrt
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
_except_handler3
_beginthreadex
_CxxThrowException
_purecall
memset
_wcsnicmp
malloc
free
_wtol
memcpy
memmove
memcmp
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z
_controlfp
Sections
.text Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ