Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_1479b3354d7f9e6fe513f88924ae0e5c.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_1479b3354d7f9e6fe513f88924ae0e5c.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_1479b3354d7f9e6fe513f88924ae0e5c
-
Size
180KB
-
MD5
1479b3354d7f9e6fe513f88924ae0e5c
-
SHA1
ca3e2ce38eb5b9b5651b6fec8d38b523dfceb3c6
-
SHA256
0b575f9b95f12fd7e995eb8a9a6e3d742a3762b75cd20ca05830851ca979e342
-
SHA512
b46435aa607af53ffea9e72626c93fa573385ec1e76a11e98b1a6b8754a0e6f7277d61403c7649c46557d036701271f79761765b8827830caa20ff775e20f8fb
-
SSDEEP
3072:R4DlgwOy4hsf3hyjNbhGKJ6TOAqOjhM18uI2WupaXgAFFVfvu+bAZFAzpYlgFDal:ylgry4avCP6u1vI2TmvVfvSZFAtYiDo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_1479b3354d7f9e6fe513f88924ae0e5c
Files
-
JaffaCakes118_1479b3354d7f9e6fe513f88924ae0e5c.exe windows:4 windows x86 arch:x86
bf2a92ee9520215cd79cb94f443ae096
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
shell32
SHCreateDirectoryExW
SHFileOperationW
SHGetFolderPathW
kernel32
GetCurrentProcess
RaiseException
GetThreadPriority
CloseHandle
HeapAlloc
GetProcAddress
GetCurrentDirectoryW
HeapFree
TerminateProcess
SetStdHandle
IsValidCodePage
GetLocaleInfoW
LeaveCriticalSection
EnterCriticalSection
WriteFile
GetConsoleOutputCP
CreateFileA
DeleteCriticalSection
PurgeComm
GetLastError
MultiByteToWideChar
IsDebuggerPresent
WriteConsoleA
ReadFile
EnumResourceNamesA
RtlUnwind
HeapReAlloc
InitializeCriticalSection
HeapSize
GetCPInfo
InterlockedIncrement
SetUnhandledExceptionFilter
WriteConsoleW
IsValidLocale
WideCharToMultiByte
GetProcessHeap
ExitProcess
LCMapStringW
EnumSystemLocalesA
GlobalAlloc
GetCommandLineA
GetModuleFileNameW
GetUserDefaultLCID
GetFullPathNameW
LCMapStringA
UnhandledExceptionFilter
SetEndOfFile
ExitProcess
GetVersionExA
GetCurrentThreadId
GetModuleHandleA
Sleep
InterlockedDecrement
GetFullPathNameA
advapi32
RegCreateKeyExW
RegCloseKey
RegSetValueExW
user32
GetClassLongA
MessageBoxW
rpcrt4
UuidCreate
Sections
.text Size: 149KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 512B - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ