Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_677ca1c9d30d0e112bc541c87198506a.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_677ca1c9d30d0e112bc541c87198506a.exe
Resource
win10v2004-20250129-en
General
-
Target
JaffaCakes118_677ca1c9d30d0e112bc541c87198506a
-
Size
181KB
-
MD5
677ca1c9d30d0e112bc541c87198506a
-
SHA1
4f38c5b2af8152baac0f7b84648d4691ae389480
-
SHA256
0fcf50c309999134e6376bf888fb462b358f8b0e4dede2ad9eaabdd33e489216
-
SHA512
d101727803a5cedade6cf620bdc44c2d07e93dd371294f0044e9668e6954be823c4ff07b45f4e1ae50cc518498b00d8cd28cdb5a501852f80e9f304b1eb0287c
-
SSDEEP
3072:Gxl1HO4NAPPrQv93zKRKtgI0H97iBAdjUYy6N7GaUnzyI5dTjfREoOuQHOOZzo:GbdO4ePPa3zdkH9kAd5N7GhnHtjfREo8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_677ca1c9d30d0e112bc541c87198506a
Files
-
JaffaCakes118_677ca1c9d30d0e112bc541c87198506a.exe windows:4 windows x86 arch:x86
015cb18c54b874a2e710324a99ec2d84
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LCMapStringW
GetLastError
GetThreadPriority
HeapFree
WideCharToMultiByte
GetCurrentThreadId
WriteConsoleW
SetEndOfFile
LeaveCriticalSection
SetUnhandledExceptionFilter
HeapSize
SetCommConfig
IsValidCodePage
InterlockedIncrement
GetModuleFileNameW
LCMapStringA
EnumSystemLocalesA
GlobalAlloc
GetUserDefaultLCID
EnterCriticalSection
GetLocaleInfoW
RaiseException
GetVersionExA
GetConsoleOutputCP
EnumResourceNamesA
GetCurrentDirectoryW
CloseHandle
DeleteCriticalSection
ReadFile
WriteConsoleA
GetModuleHandleA
InterlockedDecrement
GetFullPathNameW
SetStdHandle
MultiByteToWideChar
ExitProcess
GetProcessHeap
HeapReAlloc
TerminateProcess
GetCommandLineA
UnhandledExceptionFilter
GetCPInfo
InitializeCriticalSection
CreateFileA
WriteFile
RtlUnwind
IsDebuggerPresent
GetProcAddress
GetCurrentProcess
IsValidLocale
HeapAlloc
Sleep
ExitProcess
GetFullPathNameA
shell32
SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW
advapi32
RegCloseKey
RegCreateKeyExW
RegSetValueExW
user32
GetClassLongA
MessageBoxW
rpcrt4
UuidCreate
Sections
.text Size: 150KB - Virtual size: 149KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 512B - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ