Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_437298c4fbec9e4ef812f7324ffaf4b6.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_437298c4fbec9e4ef812f7324ffaf4b6.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_437298c4fbec9e4ef812f7324ffaf4b6
-
Size
104KB
-
MD5
437298c4fbec9e4ef812f7324ffaf4b6
-
SHA1
4468814c74f41a69d7cbc73c0e80edb02889c1f6
-
SHA256
c1b8f071d7ca85637086f1a38873d86937aa1b180de301ff3ef7211dcefc0922
-
SHA512
d9c2ecd4a131466cb49e77016b062e802848cdc70343d7b56a320d5c62222d816540469a58fb4110e807a1762aa4a3f902b4c97c78d1d5bd4d154273ecd6766c
-
SSDEEP
1536:QM6jnaxvwQ5zttkv7EoIzUY9OXkHAoFWVL5zzgeWk8x7o1/ilEXeUKfZ0s3mYzz3:EgwWzoIoIUXkH61Mdkg7ogGYAuz3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_437298c4fbec9e4ef812f7324ffaf4b6
Files
-
JaffaCakes118_437298c4fbec9e4ef812f7324ffaf4b6.exe windows:4 windows x86 arch:x86
aa90bd630231b4674008d31f751d4184
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
GetCPInfo
GetStringTypeW
GetOEMCP
CreateFileA
SetFilePointer
FlushFileBuffers
SetStdHandle
GetProcAddress
SetEndOfFile
ReadFile
LoadLibraryA
GetStringTypeA
GetVersion
HeapAlloc
RtlUnwind
HeapReAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetLastError
CloseHandle
WriteFile
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
CreateDirectoryA
user32
GetFocus
GetDoubleClickTime
GetCursor
CloseClipboard
GetDesktopWindow
GetParent
GetDC
BeginDeferWindowPos
BringWindowToTop
AdjustWindowRect
CloseWindow
gdi32
GetBkColor
Sections
.text Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ