Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_4373d176a3ffaeb429e867006f1031b2.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
JaffaCakes118_4373d176a3ffaeb429e867006f1031b2.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_4373d176a3ffaeb429e867006f1031b2
-
Size
272KB
-
MD5
4373d176a3ffaeb429e867006f1031b2
-
SHA1
c3a1cd53f31bd8d47655935a071e3b848ae94882
-
SHA256
adaa0bfba4495903ca614d061d868ae491013a8325cc45da904da00fb05ccda4
-
SHA512
5a5d17e40a2888ef5459ec0fa1a75b58605369535cb8f32465df0b56d208813ff6244456d751ae3de08a8a274c8b88d74f42de6304f3a9ddfdef19adfa67fc5d
-
SSDEEP
6144:t+7NM95MzgE93D3lMnustbdPAaGcyjDBcJj41hX2torwrp:t+7e95fEVGnr+DBcJEnXwPr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_4373d176a3ffaeb429e867006f1031b2
Files
-
JaffaCakes118_4373d176a3ffaeb429e867006f1031b2.exe windows:4 windows x86 arch:x86
bc6f63b777543eef9d0f634ae4d03039
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
EnumObjects
Chord
GetWindowOrgEx
SetDeviceGammaRamp
FloodFill
ResetDCW
DeleteColorSpace
RectVisible
GetLogColorSpaceW
PolyPolyline
EnumMetaFile
GetPaletteEntries
GetObjectW
GetICMProfileW
GetMetaFileBitsEx
SetDIBitsToDevice
GetTextExtentPoint32A
SetWindowOrgEx
CreateDIBPatternBrush
CreateHatchBrush
GetStockObject
user32
GetDlgItemInt
DragDetect
CascadeWindows
FreeDDElParam
EnumDisplayDevicesW
comdlg32
LoadAlterBitmap
wininet
GopherCreateLocatorA
InternetSetOptionA
FtpDeleteFileW
InternetSetOptionExA
RetrieveUrlCacheEntryFileW
GetUrlCacheEntryInfoExA
FindFirstUrlCacheEntryW
SetUrlCacheGroupAttributeA
InternetOpenA
FindFirstUrlCacheEntryExA
SetUrlCacheHeaderData
InternetGoOnlineW
FtpRemoveDirectoryA
InternetSetCookieW
InternetShowSecurityInfoByURL
CreateUrlCacheContainerW
kernel32
ExitProcess
InterlockedDecrement
HeapReAlloc
MultiByteToWideChar
CompareStringA
SetLocaleInfoA
TerminateProcess
IsValidLocale
HeapDestroy
TlsAlloc
GetTimeZoneInformation
UnhandledExceptionFilter
GetUserDefaultLCID
HeapFree
FreeLibrary
SetEnvironmentVariableA
IsDebuggerPresent
Sleep
GetTickCount
WideCharToMultiByte
GetCPInfo
TlsSetValue
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
GetCurrentProcessId
GetShortPathNameA
GetLogicalDriveStringsW
TlsFree
EnumSystemLocalesA
VirtualQuery
SetLocaleInfoW
VirtualFree
GetLocaleInfoA
GetCommandLineA
GetStdHandle
GetPrivateProfileSectionNamesW
LCMapStringA
GetModuleHandleW
GetModuleFileNameA
LoadLibraryA
GetCurrentDirectoryW
SetLastError
HeapCreate
GetProcAddress
IsValidCodePage
lstrcpynA
GetOEMCP
GetFileType
GetLocaleInfoW
HeapAlloc
CompareStringW
WriteFile
DeleteCriticalSection
TlsGetValue
GetModuleHandleA
QueryPerformanceCounter
LeaveCriticalSection
EnterCriticalSection
GetSystemTimeAsFileTime
SetConsoleCtrlHandler
GetCurrentProcess
GetStringTypeA
InterlockedIncrement
GetACP
GetDateFormatA
FreeEnvironmentStringsA
GetStartupInfoA
CreateProcessW
WaitNamedPipeW
FreeEnvironmentStringsW
GetStringTypeW
RtlUnwind
DeleteFiber
GetLastError
GetEnvironmentStrings
LCMapStringW
HeapSize
GetTimeFormatA
GetCurrentThread
InterlockedExchange
CreateFileW
SetHandleCount
CompareFileTime
GetVolumeInformationW
GetEnvironmentStringsW
VirtualAlloc
GetCurrentThreadId
Sections
.text Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ