Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_0d2731fb261baabbe6efff98c2133962.exe
Resource
win7-20241023-en
General
-
Target
JaffaCakes118_0d2731fb261baabbe6efff98c2133962
-
Size
186KB
-
MD5
0d2731fb261baabbe6efff98c2133962
-
SHA1
2977b2a0951b89e80d72e9b3cc8df03433f166ac
-
SHA256
3166b782d3485d5fc7c09a6ce78fb4f23b75291b6e17e221dbece7fbc72b2742
-
SHA512
d0df70fb8ec1295a05735b26819483a386702b52df9a656ddc3b3ed25357e655a255a00b4a13890f2f591b1f1c724787466eff304b241800628f1f43ee4012e6
-
SSDEEP
3072:Thnb9qqRM13hPuo7xoJZIkyAU4A8++Q+TigimaDxtolVvASUFsPI7bbXZQ0RHW3C:tbISI3hdMZxA8++3iMotxSUKA7HZjV2C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_0d2731fb261baabbe6efff98c2133962
Files
-
JaffaCakes118_0d2731fb261baabbe6efff98c2133962.exe windows:4 windows x86 arch:x86
947d9aef41dc9233ef11c756824c47b7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcmpA
GetCPInfo
AddAtomA
GetStartupInfoA
GetThreadLocale
IsBadReadPtr
SetUnhandledExceptionFilter
SetFilePointer
GetStringTypeW
GetLastError
GetCurrentThreadId
CloseHandle
UnhandledExceptionFilter
GetOEMCP
FreeEnvironmentStringsA
lstrcmpiA
MulDiv
FreeLibrary
lstrlenA
GetDiskFreeSpaceA
GetFileAttributesA
GetStringTypeA
EnterCriticalSection
VirtualProtect
IsBadCodePtr
LCMapStringA
GetModuleHandleA
MultiByteToWideChar
GetEnvironmentStringsW
FindFirstFileA
ReadFile
EnumResourceNamesW
DeleteCriticalSection
lstrcatA
CreateFileA
lstrcpynA
LeaveCriticalSection
Sleep
WriteFile
WideCharToMultiByte
lstrlenW
FlushFileBuffers
LoadLibraryA
GetProcAddress
FreeEnvironmentStringsW
lstrcpyA
GetEnvironmentStrings
GetFullPathNameA
InitializeCriticalSection
LCMapStringW
GetTickCount
SetStdHandle
RaiseException
setupapi
CM_Get_Global_State
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
Sections
.text Size: 101KB - Virtual size: 245KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ