Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_36f5642aed63bd489989d73594f97004.exe
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_36f5642aed63bd489989d73594f97004
-
Size
211KB
-
MD5
36f5642aed63bd489989d73594f97004
-
SHA1
cf2a732d268d0a9c6e6afddb98484234b771b7a4
-
SHA256
46939db3634db384bfa9de3d8abbc41ff0fe5f51e5d64d9f46857ba17db9d242
-
SHA512
22843c5e4dcc7b244950e8e9d9ecd31ac8ee910d30b961e195765a78bfb679ba62609b35a6b9cb17af8e2d86e6f8cded0b356fe619d8b457c092e94c345c93f1
-
SSDEEP
6144:VILqZ+2To+fS2UKb9Tc4sUVd6/TlXsKcs4t+HScB:VeqZbT821RAUVdeTlXws4o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_36f5642aed63bd489989d73594f97004
Files
-
JaffaCakes118_36f5642aed63bd489989d73594f97004.exe windows:4 windows x86 arch:x86
e0497c17a8e116262fb0ba955fb7246a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
shlwapi
StrRetToBSTR
StrCmpIW
PathFindExtensionW
PathAppendW
PathIsRelativeW
PathCombineW
oleacc
CreateStdAccessibleObject
kernel32
GlobalFindAtomA
CreateSemaphoreA
CloseHandle
GetVersion
InterlockedExchange
Sleep
DeleteCriticalSection
InitializeCriticalSection
GetLocaleInfoA
GetDiskFreeSpaceA
SetLastError
EnterCriticalSection
LeaveCriticalSection
CreateEventA
ResetEvent
VirtualQuery
EnumResourceLanguagesW
GetWindowsDirectoryA
QueryPerformanceCounter
FlushInstructionCache
GetPrivateProfileStructW
GetModuleHandleA
SetEvent
CreateThread
GetSystemDirectoryA
GetComputerNameA
CompareStringA
Sections
.text Size: 113KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ