Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_2a70314e3cbe1e0d104b6093737aed3b.exe
Resource
win7-20241023-en
General
-
Target
JaffaCakes118_2a70314e3cbe1e0d104b6093737aed3b
-
Size
188KB
-
MD5
2a70314e3cbe1e0d104b6093737aed3b
-
SHA1
434dfaba2abd0549dc36e71d93c94da0362781d3
-
SHA256
841ba2abe9ae03a658e08b74802eefaa5d10928954cfca3c3e51ae37a272a185
-
SHA512
c9e1d431d158132907f982fd71e0c5e278c8c0f473c0e940f28d8ed90d1d18af3412db1d903173f8bc8fa9307f43f3dcd06355a1848de3794b8d6e374b2139c2
-
SSDEEP
3072:y/59Bv2rGJQ1ylz/POFgqJheF46qL3Z3f//OoupzQfl8i9j:y/dvG40xnem6GZfexpM+u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_2a70314e3cbe1e0d104b6093737aed3b
Files
-
JaffaCakes118_2a70314e3cbe1e0d104b6093737aed3b.exe windows:4 windows x86 arch:x86
a99ab17c99a1cdfd874236818954c77f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
kernel32
FindFirstFileW
GetCurrentProcessId
lstrcmpiW
CopyFileW
GlobalFindAtomW
WaitForSingleObject
GetPrivateProfileStringW
GetCurrentDirectoryW
HeapAlloc
LocalFree
FreeLibrary
GetModuleHandleW
GetSystemDirectoryW
LoadLibraryExA
WritePrivateProfileStringW
EnumResourceLanguagesA
SetFileAttributesW
CreateMutexW
GetWindowsDirectoryA
LoadLibraryW
GetProcessHeap
FindClose
GetPrivateProfileIntW
HeapFree
GetPrivateProfileIntW
LoadLibraryExW
ReleaseMutex
lstrlenA
ExpandEnvironmentStringsW
GetModuleHandleA
FindNextFileW
GetSystemInfo
GetCurrentProcess
shlwapi
GetAcceptLanguagesA
PathFindExtensionW
UrlCreateFromPathW
PathRemoveFileSpecW
UrlUnescapeW
PathCreateFromUrlW
PathIsRelativeW
PathAppendW
StrCmpIW
PathCombineW
rpcrt4
UuidCreate
Sections
.text Size: 94KB - Virtual size: 234KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ