Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_1b35fdfa9b3264bf1ef4a970856b7be7.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_1b35fdfa9b3264bf1ef4a970856b7be7.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_1b35fdfa9b3264bf1ef4a970856b7be7
-
Size
157KB
-
MD5
1b35fdfa9b3264bf1ef4a970856b7be7
-
SHA1
ae318feb60fc099cc7faf82f81901b5220a0677f
-
SHA256
f450f64cb18d1145be9efedb995aa564d4183e48ac01f0f26e785ce01a9de006
-
SHA512
6f3168847e3c446305031d2bb01becc17d066deb685555c9aefe321b5036e49a201e41535164d9560ca8e08a352c24b9c075fcb3bcbb17a517441b1e937c1004
-
SSDEEP
3072:6N+u1KFe2Fu0uvCrodJfecng9eviMK3S0Pl5Nq6JKczNhAU:Ml4kHAoXfeigcvzCS2l5NqCK+hAU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_1b35fdfa9b3264bf1ef4a970856b7be7
Files
-
JaffaCakes118_1b35fdfa9b3264bf1ef4a970856b7be7.exe windows:4 windows x86 arch:x86
ead318996d91f37d6dc58968346aeec3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
oleacc
LresultFromObject
CreateStdAccessibleObject
user32
wsprintfW
KillTimer
SetTimer
SendMessageA
DispatchMessageW
CharUpperW
CharNextW
PostThreadMessageW
GetDC
GetMessageW
TranslateMessage
UnregisterClassA
shlwapi
PathCombineW
PathFileExistsW
ole32
CoTaskMemAlloc
CoRevokeClassObject
CoUninitialize
CoRegisterClassObject
CoTaskMemFree
CoInitialize
CoTaskMemRealloc
StringFromGUID2
CoCreateInstance
StringFromCLSID
kernel32
WideCharToMultiByte
lstrcpyA
InitializeCriticalSection
OutputDebugStringW
GetProcessAffinityMask
LockResource
GetACP
lstrcpyA
GetLastError
lstrcmpiW
EnumResourceNamesW
lstrlenW
lstrcpyW
GetTickCount
MultiByteToWideChar
GlobalAlloc
GlobalFree
FreeEnvironmentStringsW
FindClose
GetCPInfo
GetModuleHandleW
Sections
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.isete Size: 1024B - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ