Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_4c5c07dfcc59579822512e350f40ac4a.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_4c5c07dfcc59579822512e350f40ac4a
-
Size
112KB
-
MD5
4c5c07dfcc59579822512e350f40ac4a
-
SHA1
9335a800a96f3d877607cb4be92f71678ce9c89c
-
SHA256
5a7e66befb5ec2d8be73bc4b7298546d77dffc6a88047e8b5371cc078bf2194d
-
SHA512
adf3dce5fb355d386f4211fe48ad735c7f8df56a06bbac55bf4394664e33d56b22e3c76c1922cb2dee2855a766d882313c0df87e2d8b800148488da78b10ed5c
-
SSDEEP
1536:0JQj+5nL6gUd9mmimlskwlRcDXV7R4qViRaVKssCrlVA8hcsUpoVJ:h+ggUd9Zimlzwl4XV14mqaMssCrAB+VJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_4c5c07dfcc59579822512e350f40ac4a
Files
-
JaffaCakes118_4c5c07dfcc59579822512e350f40ac4a.exe windows:4 windows x86 arch:x86
e7f4dd1cf3e7b68ba4f119f1e4ddb713
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsW
LocalFree
FormatMessageA
GetLastError
lstrlenA
OutputDebugStringA
LocalAlloc
SetHandleCount
GetStdHandle
FlushFileBuffers
SetStdHandle
CloseHandle
GetProcAddress
LoadLibraryA
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetCPInfo
GetACP
GetOEMCP
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
SetLastError
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
RtlUnwind
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapAlloc
user32
MessageBoxA
setupapi
SetupDiGetClassDevsA
SetupDiCallClassInstaller
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.erdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE