Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_5c61ff439c390b7786e920ff5fb73373.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_5c61ff439c390b7786e920ff5fb73373.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_5c61ff439c390b7786e920ff5fb73373
-
Size
263KB
-
MD5
5c61ff439c390b7786e920ff5fb73373
-
SHA1
4381da0c00bc2e6998e1b16e3d6a7b9d9cae6560
-
SHA256
a4984ea96209e543ea661154d19f21df30017492bcacccb2bb97c0b81d718a75
-
SHA512
5da094f55728d175186e5c2055180fd5d0b59c16de21a0f1f441068cf2dd7410ea192adcebe742196a54db94b4d6134678abaa4e1bcecb39b57f67f43dd17993
-
SSDEEP
6144:AMCjhUYcEq1J1IE0YBlq5FMyOn3cF9lGoKhDM7HoGH:DCbjqDFHBs8yOcIoKhIL9H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_5c61ff439c390b7786e920ff5fb73373
Files
-
JaffaCakes118_5c61ff439c390b7786e920ff5fb73373.exe windows:4 windows x86 arch:x86
7680278fb4021421436eff24ca90af51
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wtsapi32
WTSUnRegisterSessionNotification
WTSFreeMemory
WTSQuerySessionInformationW
WTSEnumerateSessionsW
WTSRegisterSessionNotification
kernel32
GetCurrentProcessId
CreateProcessA
HeapSize
InterlockedExchange
lstrlenA
GetCurrentThreadId
RaiseException
HeapFree
HeapFree
HeapDestroy
IsDebuggerPresent
HeapAlloc
GetTickCount
GetStartupInfoA
GetACP
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetModuleHandleA
GetLocaleInfoA
GetEnvironmentVariableA
InterlockedCompareExchange
GetProcessHeap
Sleep
HeapReAlloc
GetSystemTime
EnumResourceTypesW
WideCharToMultiByte
LoadLibraryExW
WriteFile
LoadLibraryW
CloseHandle
LocalAlloc
CompareFileTime
SystemTimeToFileTime
GetThreadLocale
CreateFileW
lstrlenW
MultiByteToWideChar
TerminateProcess
GetStdHandle
SetUnhandledExceptionFilter
GetCurrentProcess
UnhandledExceptionFilter
lstrcpynW
oleacc
LresultFromObject
AccessibleObjectFromEvent
Sections
.text Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 202KB - Virtual size: 202KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ