Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_50423fd16d4e2c21d286c062164c27ab.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_50423fd16d4e2c21d286c062164c27ab
-
Size
108KB
-
MD5
50423fd16d4e2c21d286c062164c27ab
-
SHA1
a574914d4e8b304216ce09e13d75e8af51e3b476
-
SHA256
3ec9b2e6eaa1dacbd0446096270912390e77fcdf9540961afec83c31e95e207e
-
SHA512
de7bcbe31052f43757f66bb45c4d1bb5eb5853879b6161f64347dd15d483717c2af855462c3cf428459ddda6d6416e49b9f60e72c38934a8d2e442780ea8fe3b
-
SSDEEP
1536:PnFnrx4TEk1btTmmfAa6R5NlT94rbK/n36ek2+K39:PnVUbtT9f76Flx4cn36bDK39
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_50423fd16d4e2c21d286c062164c27ab
Files
-
JaffaCakes118_50423fd16d4e2c21d286c062164c27ab.exe windows:4 windows x86 arch:x86
e9fdc8001e46bc56729947bfdf479c43
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateDialogParamA
LoadMenuA
kernel32
HeapCreate
GetLastError
GetProcAddress
GetModuleHandleA
FindResourceA
CreateProcessA
GetCommandLineA
GetStartupInfoA
WriteProcessMemory
VirtualAllocEx
WaitForSingleObject
CreateThread
CloseHandle
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
RaiseException
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapSize
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ