Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_5b3ec8fc824850800a87d11401c3685e.exe
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_5b3ec8fc824850800a87d11401c3685e
-
Size
187KB
-
MD5
5b3ec8fc824850800a87d11401c3685e
-
SHA1
1d7f9754535b6ec8ad6e6d63a2ec39652f1b7038
-
SHA256
d4ffa4ed5ef1cf7cc9dd93fd593ca22a09067660b3ec8c9e6b4d9d47317d3168
-
SHA512
c8e97eb196a203af3e2b4919a7cfa18bf2ae6a530b3b27e5b3d156347693d1a9434d452da8db8ae6e8a849096e5166c965e4e82d85d90281cd1d36423ecb1b76
-
SSDEEP
3072:4HgmCIXvUe+hYrjR5c9RvNuGAAaXhBGVc1SeaHttzrQOyIZM/E:4pxXShYrty/FucaSVcglHtNPyQM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_5b3ec8fc824850800a87d11401c3685e
Files
-
JaffaCakes118_5b3ec8fc824850800a87d11401c3685e.exe windows:4 windows x86 arch:x86
38af001aabdc04d773962c9b35e6d088
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
gdi32
IntersectClipRect
SetBrushOrgEx
PolylineTo
SetROP2
FillPath
EndPath
PolyBezierTo
BeginPath
SetGraphicsMode
GetGraphicsMode
GetStockObject
MoveToEx
CreatePatternBrush
Rectangle
LineTo
GetClipBox
SelectClipPath
CloseFigure
GetWorldTransform
PolyDraw
kernel32
GlobalAddAtomW
GetCPInfo
VirtualAlloc
SetHandleCount
HeapReAlloc
WideCharToMultiByte
IsBadCodePtr
GetOEMCP
IsBadReadPtr
GetFileType
SetUnhandledExceptionFilter
HeapDestroy
FreeEnvironmentStringsW
UnhandledExceptionFilter
EnumResourceNamesA
GetStdHandle
GetEnvironmentStrings
GetEnvironmentStringsW
SetConsoleCtrlHandler
WriteFile
VirtualFree
GetDateFormatW
FatalAppExitA
HeapCreate
GetModuleFileNameA
GetEnvironmentVariableA
GetStartupInfoA
GetACP
FreeEnvironmentStringsA
IsBadWritePtr
SetFilePointer
GetCurrentThread
Sections
.text Size: 96KB - Virtual size: 239KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ