Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_52cab382c53b6b75d9e279760db6e04d.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_52cab382c53b6b75d9e279760db6e04d
-
Size
172KB
-
MD5
52cab382c53b6b75d9e279760db6e04d
-
SHA1
27c39ae79affa010bcd231ea403f66d6a8714658
-
SHA256
6e2e612f9370c783e1530a334c3ed7a4fa3c3aeb51c06a0354ad82cf95e3c616
-
SHA512
e30275c790c4aafebc427163d496f12f07be38e692e8da6b1a2494126dea8a4cfb4a4550323cbc103670daed2c31479fb8eb49e8e29be6d5392f6f5dfda559e2
-
SSDEEP
3072:GTDe1ALKu5G16xm7NI+inhd3x480mXjodBVCPbmVdP+Agiid1Rg9zJIHJDrWVtw6:MDe141xaohRx48sYPb2dGsqkzKHJkw6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_52cab382c53b6b75d9e279760db6e04d
Files
-
JaffaCakes118_52cab382c53b6b75d9e279760db6e04d.exe windows:4 windows x86 arch:x86
623b7f71cb4298837a1f8eafc8a9e68f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
shlwapi
GetAcceptLanguagesA
PathCreateFromUrlW
UrlUnescapeW
PathAppendW
StrCmpIW
UrlCreateFromPathW
PathIsRelativeW
PathRemoveFileSpecW
PathFindExtensionW
PathCombineW
kernel32
GetTickCount
TerminateProcess
FoldStringW
GlobalFindAtomW
UnhandledExceptionFilter
VirtualProtect
QueryPerformanceCounter
GetModuleHandleW
IsDebuggerPresent
GetCurrentProcessId
GetCurrentProcess
EnumResourceLanguagesA
GetStartupInfoA
InterlockedCompareExchange
GetPrivateProfileSectionW
GetCurrentThreadId
GetSystemTimeAsFileTime
GetProcessHeap
LocalAlloc
SetUnhandledExceptionFilter
GetLocaleInfoW
InterlockedExchange
DeleteFileW
oleacc
CreateStdAccessibleObject
Sections
.text Size: 86KB - Virtual size: 482KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ