Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_41efc86ae0ca44acecee8fe285cf4bd5.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_41efc86ae0ca44acecee8fe285cf4bd5.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_41efc86ae0ca44acecee8fe285cf4bd5
-
Size
180KB
-
MD5
41efc86ae0ca44acecee8fe285cf4bd5
-
SHA1
cc564029b0c6e27ca4e1290a85bf31706c13aed7
-
SHA256
ce959aaf43f946a5a0d14e453ddc6bcded09a78c8102c79e7489a0244c1ef14f
-
SHA512
a55de82484f06d37b507eb20ac798525ccc072730afa19c52511a043707c7a1ea2331475d8a84ceaab97fd688ff311f570845c640eaf507f8601b790ae35b862
-
SSDEEP
3072:xreDqSy17OY2ZbZ7hSbPplbSXUDZMPXgUkNVzg2Swjeqbo5XZlKlVUQfkpPH:+jyoYCblhGPrhZGXsFHS0eH7eVfkpP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_41efc86ae0ca44acecee8fe285cf4bd5
Files
-
JaffaCakes118_41efc86ae0ca44acecee8fe285cf4bd5.exe windows:4 windows x86 arch:x86
93b246f22eb3894a713b1062ad1431c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegCreateKeyExW
RegCloseKey
RegSetValueExW
rpcrt4
UuidCreate
user32
GetClassLongA
MessageBoxW
shell32
SHCreateDirectoryExW
SHFileOperationW
SHGetFolderPathW
kernel32
WriteConsoleA
TerminateProcess
UnhandledExceptionFilter
SetStdHandle
HeapReAlloc
GetThreadPriority
InitializeCriticalSection
GetCurrentProcess
HeapAlloc
SetEndOfFile
IsDebuggerPresent
RtlUnwind
HeapSize
GetCommandLineA
WriteConsoleW
WriteFile
WideCharToMultiByte
PurgeComm
GetCPInfo
LeaveCriticalSection
GetCurrentDirectoryW
DeleteCriticalSection
LCMapStringW
MultiByteToWideChar
ReadFile
IsValidCodePage
EnumSystemLocalesA
EnumResourceNamesA
GetModuleHandleA
GetFullPathNameW
GlobalAlloc
RaiseException
InterlockedIncrement
GetProcAddress
GetVersionExA
GetLocaleInfoW
GetProcessHeap
EnterCriticalSection
IsValidLocale
GetUserDefaultLCID
GetModuleFileNameW
ExitProcess
SetUnhandledExceptionFilter
GetLastError
ExitProcess
LCMapStringA
HeapFree
InterlockedDecrement
Sleep
GetCurrentThreadId
CloseHandle
CreateFileA
GetConsoleOutputCP
GetFullPathNameA
Sections
.text Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 512B - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ