Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_1a22195f40160484fbde37eab21ca940.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_1a22195f40160484fbde37eab21ca940.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_1a22195f40160484fbde37eab21ca940
-
Size
254KB
-
MD5
1a22195f40160484fbde37eab21ca940
-
SHA1
1a89280776b6c7de09ec1f1514f92c31512d95f8
-
SHA256
aaf111f211a0f918bb753d5fb1434c5d5aedf8628459196f562de6a5f0b5b536
-
SHA512
9b00eac27c006c5ac8e372c0fe2b0a39fe8e875a40dfb4e45eff371bec750f1caab94dc70113c7b9df1dc0261ecd1a459d0434bc4e980bc22204241772895bdb
-
SSDEEP
6144:iOrPOW0jhUSpgJZrxe3nZNNAPA/jTg2t4Vqaxo:LKWIhX+rxEndt4O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_1a22195f40160484fbde37eab21ca940
Files
-
JaffaCakes118_1a22195f40160484fbde37eab21ca940.exe windows:4 windows x86 arch:x86
371ae8194ad2e56245156a0147916408
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetCurrentThreadId
WaitForSingleObject
lstrcpynA
GetComputerNameA
lstrlenA
GetModuleHandleA
CreateMutexW
OpenMutexW
CreateMutexA
OpenMutexA
OpenEventA
CreateEventA
ExpandEnvironmentStringsW
SetErrorMode
lstrcpyA
GetProcessHeap
lstrcatA
ExpandEnvironmentStringsA
LocalFree
WaitForMultipleObjects
GetFullPathNameA
GetTempFileNameW
CreateDirectoryW
GetTempPathW
lstrlenW
GetLocalTime
CreateSemaphoreA
LocalAlloc
RaiseException
GetModuleHandleW
IsDebuggerPresent
SetUnhandledExceptionFilter
GetProcAddress
samlib
SamOpenAlias
SamCloseHandle
SamiChangePasswordUser
SamSetSecurityObject
SamDeleteAlias
SamRemoveMemberFromAlias
SamDeleteUser
SamAddMemberToAlias
dskquoui
DllGetClassObject
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Ky Size: 512B - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.a Size: 4KB - Virtual size: 822KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jsm Size: 4KB - Virtual size: 540KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aNY Size: 91KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 233KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.i Size: 121KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ