Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_1869d6cbccd41ba010a2ce06e850502a.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_1869d6cbccd41ba010a2ce06e850502a.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_1869d6cbccd41ba010a2ce06e850502a
-
Size
280KB
-
MD5
1869d6cbccd41ba010a2ce06e850502a
-
SHA1
2e2298535d02752a39f5117deb9aa1f2bb5b66d9
-
SHA256
89e0f2d55c98c3e4cf57b9c0b74de97165118d896d9ef43ac41651f7f6aacb6b
-
SHA512
7eca6268c3979fcc9dd36aeb1a64d7974b8278f0dabb7df3601999dbd4612ffa240ede8644e231eeb7c7156ce67b7883fe9f23d6a1e8e413a7e352aaef5a96f0
-
SSDEEP
6144:q8RX+921/Z3sr7xDP3KDdslpn7xqQ0Wt60vlOU0V/hF:/kwZZ8rRP3AEp7xqjWPlH0pr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_1869d6cbccd41ba010a2ce06e850502a
Files
-
JaffaCakes118_1869d6cbccd41ba010a2ce06e850502a.exe windows:4 windows x86 arch:x86
0f95d1b55d3df8b149cefc2393446cde
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCPInfo
MulDiv
SetFilePointer
Sleep
AddAtomA
WideCharToMultiByte
DeleteCriticalSection
EnterCriticalSection
lstrcmpiA
FreeEnvironmentStringsA
SetUnhandledExceptionFilter
IsBadCodePtr
GetEnvironmentStrings
GetFullPathNameA
LoadLibraryA
LeaveCriticalSection
lstrcpynA
GetCurrentThreadId
IsBadReadPtr
MultiByteToWideChar
FreeLibrary
GetStartupInfoA
GetTickCount
GetEnvironmentStringsW
lstrcmpA
GetDiskFreeSpaceA
CreateFileA
GetStringTypeW
EnumResourceNamesW
GetOEMCP
WriteFile
GetStringTypeA
FreeEnvironmentStringsW
GetLastError
LCMapStringA
GetFileAttributesA
SetStdHandle
ReadFile
lstrcatA
GetProcAddress
lstrlenA
lstrlenW
lstrcpyA
VirtualProtect
GetThreadLocale
UnhandledExceptionFilter
InitializeCriticalSection
FindFirstFileA
FlushFileBuffers
GetModuleHandleA
LCMapStringW
CloseHandle
RaiseException
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
Sections
.text Size: 139KB - Virtual size: 278KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ