Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_5e67cf5099e201c63b5b5d32cdebce33.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_5e67cf5099e201c63b5b5d32cdebce33.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_5e67cf5099e201c63b5b5d32cdebce33
-
Size
199KB
-
MD5
5e67cf5099e201c63b5b5d32cdebce33
-
SHA1
2bdcd25e8988254148e5dcf5949f43546559d81a
-
SHA256
113414ba40e0cf76e2b5ab71419e30fda53d1bea7bb918962fc8c12a84746a1b
-
SHA512
d1e77814726fef1928742b41ff6f7a60cbf304c6cb8cda8ec336cf32a622fab97e8fd804eb2940252cf3eb53403bf3c56b1e5d82f3f2d2a8c73328cc4c15e140
-
SSDEEP
6144:SBd6Qler5cPh7y39r4RG1ifLgeJrukaQb8H:m8QlpKriG1ifLg+Fg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_5e67cf5099e201c63b5b5d32cdebce33
Files
-
JaffaCakes118_5e67cf5099e201c63b5b5d32cdebce33.exe windows:4 windows x86 arch:x86
e00bb417013ffb631ddc67715d6c6443
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
kernel32
SetTapeParameters
InterlockedExchange
ClearCommError
FindClose
GetWindowsDirectoryA
GetLocalTime
EnumResourceNamesA
GetVersion
ExitProcess
Sleep
GetCurrentProcessId
FindFirstFileA
ole32
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID
winmm
mciSendCommandA
sndPlaySoundA
user32
FillRect
ReleaseCapture
ReleaseDC
MoveWindow
GetDlgItem
SetCursor
LoadCursorA
SetWindowPos
GetWindowInfo
IsWindow
GetDC
GetWindowLongA
SetWindowLongA
GetSysColor
SetCapture
oleacc
LresultFromObject
CreateStdAccessibleObject
advapi32
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyA
RegEnumKeyExA
RegSetValueExA
gdi32
TextOutA
GetTextExtentPoint32A
DeleteDC
GetObjectA
CreateCompatibleDC
GetStockObject
SaveDC
DeleteObject
BitBlt
SelectObject
CreateFontIndirectA
SetTextColor
CreateSolidBrush
CreateRectRgn
RestoreDC
Rectangle
SetBkMode
GetDeviceCaps
EnumFontFamiliesExA
DeleteMetaFile
CreateCompatibleBitmap
shell32
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
Sections
.text Size: 167KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lib Size: 512B - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ