Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_2d5765216ed2a9fa2b18263810146665.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_2d5765216ed2a9fa2b18263810146665.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_2d5765216ed2a9fa2b18263810146665
-
Size
165KB
-
MD5
2d5765216ed2a9fa2b18263810146665
-
SHA1
44894e6d9ee8f2449e79d4e990f0b623966932af
-
SHA256
c58c77e0dd4481163577ca6489760178293058fc93bb2969c85be400d893425e
-
SHA512
7eb43280e25d2180c26e093fb3bc4da5dd85842d9ebca338379f382a54d54c242822e3e84b043d457c6e97d686f2fafda78ec5f9025182734f7f218b1ec89816
-
SSDEEP
3072:clWtbd0V4gW7s6L5ag6NOYRW/lnQC+BrVQC/A5jdc8/7VUebmRU4Gxa6RokzQrMb:clWtB0VN6AgkOfX+xaCALNiGxagokzt5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_2d5765216ed2a9fa2b18263810146665
Files
-
JaffaCakes118_2d5765216ed2a9fa2b18263810146665.exe windows:4 windows x86 arch:x86
1211ae050006b00961d4d3438cae4636
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetShortPathNameW
SetErrorMode
ConvertFiberToThread
FindResourceW
GetCurrentProcess
FindFirstFileW
FindClose
IsBadReadPtr
GetSystemDirectoryW
FindNextFileW
SetThreadIdealProcessor
FreeLibrary
GetLocalTime
FileTimeToSystemTime
EnumResourceNamesW
LoadResource
SetCurrentDirectoryW
RegisterWaitForSingleObject
LocalFileTimeToFileTime
FileTimeToLocalFileTime
LocalFree
LCMapStringW
GetOEMCP
SystemTimeToFileTime
GetStringTypeW
LocalAlloc
CompareStringA
SetEnvironmentVariableW
SearchPathW
user32
InvalidateRgn
ExcludeUpdateRgn
ValidateRect
EnableWindow
IsWindow
GetCapture
FlashWindow
DestroyWindow
IsWindowEnabled
ValidateRgn
RealGetWindowClassA
ReleaseCapture
UpdateWindow
SetCapture
GetUpdateRgn
mprapi
MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imul Size: 512B - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ