Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_57d323efdf2a4cff753490bb9da4f8e2.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_57d323efdf2a4cff753490bb9da4f8e2
-
Size
164KB
-
MD5
57d323efdf2a4cff753490bb9da4f8e2
-
SHA1
3219f24b2cd0ce140d7c39b5a5bc27d6156fa801
-
SHA256
2c86c3f27054047e5fc098e3405cd008fedf05e81d432275f45cdfd5410d9a53
-
SHA512
b3aedfc357ddd22d972196e2e901f26d1dc12b74536460b7f04bfdc495ced248bb1f1a18819cb38d62f969fe945f17709c4dfb8b9506edf18e145e7239e96423
-
SSDEEP
3072:p5FU+P/FtK/d9bSXsnDPufBbNEQuLSnrUwvjJNmsilCaJ:pLU+P/FM/d9bSXsnDPuJbCJLgIujJNV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_57d323efdf2a4cff753490bb9da4f8e2
Files
-
JaffaCakes118_57d323efdf2a4cff753490bb9da4f8e2.exe windows:4 windows x86 arch:x86
0105b45467204f467093104c9f8941df
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
shell32
SHFileOperationW
CommandLineToArgvW
SHGetFolderPathW
ShellExecuteW
ShellExecuteExW
ole32
CoTaskMemFree
CreateStreamOnHGlobal
CoTaskMemAlloc
CoCreateInstance
CoInitializeEx
CoUninitialize
CoInitialize
shlwapi
PathAppendW
PathRemoveFileSpecW
SHGetValueW
PathCombineW
PathFileExistsW
comctl32
PropertySheetW
oleacc
LresultFromObject
CreateStdAccessibleObject
kernel32
FillConsoleOutputAttribute
MoveFileW
GetProcessPriorityBoost
SearchPathW
EnumResourceNamesW
FreeEnvironmentStringsW
GetShortPathNameW
CompareFileTime
GetFullPathNameW
SetFileTime
user32
PostMessageW
PostQuitMessage
GetDlgCtrlID
GetFocus
ReleaseDC
SetWindowTextW
SetWindowLongW
GetDC
IsDlgButtonChecked
CreateCursor
DestroyWindow
LoadIconW
IsWindow
IsWindowEnabled
MsgWaitForMultipleObjects
Sections
.text Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idive Size: 1024B - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ