Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_0cba3634f2f90ac1d235af235f3a1b85.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_0cba3634f2f90ac1d235af235f3a1b85.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_0cba3634f2f90ac1d235af235f3a1b85
-
Size
109KB
-
MD5
0cba3634f2f90ac1d235af235f3a1b85
-
SHA1
c5d3349b8cb98c4de7c487332510951ce28fcc2c
-
SHA256
3fd19aa44d2767345d849170f9dbae4b6b98dca33a6344d1dbbc2146f275f388
-
SHA512
62fd1c450350bcd4a3023e9a519dd427a010731fba170df5a58bb0e8029efee6d574bc56dea57a7f498e6e6f3ae9e39a21071a60df3a1b9c59b48292ea0396ff
-
SSDEEP
3072:N6LD2K31+VVxHp87XHuaYnOhyk54S6vxLfPc7d2:Nm3AV3urHudOhykWSCL8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_0cba3634f2f90ac1d235af235f3a1b85
Files
-
JaffaCakes118_0cba3634f2f90ac1d235af235f3a1b85.exe windows:5 windows x86 arch:x86
e3c7d25233b8cee5cd26c718f2212d91
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalLock
GetCurrentDirectoryW
EnterCriticalSection
GetCommandLineW
GetCommandLineA
ReadFile
SetFileAttributesW
WaitForSingleObject
GetFileTime
HeapFree
MapViewOfFile
ExitProcess
SetLastError
SetLastError
GetEnvironmentVariableW
GetFileAttributesA
GetDriveTypeA
GetFileType
IsBadReadPtr
GetModuleHandleA
CloseHandle
LocalSize
HeapCreate
SuspendThread
Sleep
uxtheme
GetThemeEnumValue
GetThemeTextMetrics
SetWindowTheme
GetThemeTextExtent
OpenThemeData
CloseThemeData
CloseThemeData
DrawThemeBackground
GetThemeBool
IsThemeActive
DrawThemeEdge
GetWindowTheme
GetThemeColor
dbnmpntw
ConnectionVer
ConnectionVer
ConnectionVer
ConnectionVer
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE