Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_65fdc7ab174b342822ec1ade49a0c033.exe
Resource
win7-20241023-en
General
-
Target
JaffaCakes118_65fdc7ab174b342822ec1ade49a0c033
-
Size
418KB
-
MD5
65fdc7ab174b342822ec1ade49a0c033
-
SHA1
922845a65b8e52d3d5958dd617a47b3c146d1269
-
SHA256
521b6ed3ff99ad0dc53643ff50b48ca99a4d254bad5711274361b4c56de664b4
-
SHA512
5cb7fbf941d5a64ca2a8786a62f351e50171d2b0b8de7889dd53f3b10a9434699ac8a69ffe23d647d92490b2a46e89cabc4e2c6340b054afc9643605a65e0fa2
-
SSDEEP
12288:YqiROi9cGgawVdZ5vtKDl0EB6PupK8G4lbzPs:DiROi9tgtVGxZpKQlb4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_65fdc7ab174b342822ec1ade49a0c033
Files
-
JaffaCakes118_65fdc7ab174b342822ec1ade49a0c033.exe windows:4 windows x86 arch:x86
92ad75cb2f62d68e1ffe55b4a02f28ed
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
aclui.dll
CreateSecurityPage
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE