Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_797c25ac265de8037108f4e94eaeffe8.exe
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_797c25ac265de8037108f4e94eaeffe8
-
Size
188KB
-
MD5
797c25ac265de8037108f4e94eaeffe8
-
SHA1
7b7f0074f0d4359c12c758cfeb7683429da78278
-
SHA256
1280c3015517aad9db42e2eeb89248e2918e06164803d602fadeec6a3a55faf7
-
SHA512
ae8cbc9bb743a47a728890cfc36d71d5c7e9355ef0794dcb7702d11690d4c56a07ee78de4b221f954b24872517562b07691609dea75be94ffa33f4311eaa624c
-
SSDEEP
3072:BT4VNXhYIY2Cf6owIOa5SKsStD3ortfAdIJcCaP4BcrYeLO11ui+lIgnD:BqNX6CnowIOaQiD4JfUycC5WrY71uiNK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_797c25ac265de8037108f4e94eaeffe8
Files
-
JaffaCakes118_797c25ac265de8037108f4e94eaeffe8.exe windows:4 windows x86 arch:x86
d752fda87a2bc8b07220ac4a2f9a1a85
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
SetHandleCount
GlobalAddAtomW
IsBadReadPtr
GetOEMCP
SetConsoleCtrlHandler
SetUnhandledExceptionFilter
IsBadCodePtr
FreeEnvironmentStringsW
GetStdHandle
GetCPInfo
SetFilePointer
UnhandledExceptionFilter
IsBadWritePtr
FatalAppExitA
VirtualAlloc
EnumResourceNamesA
GetEnvironmentStringsW
HeapReAlloc
WideCharToMultiByte
GetModuleFileNameA
FreeEnvironmentStringsA
GetFileType
HeapDestroy
GetDateFormatW
VirtualFree
GetEnvironmentStrings
HeapCreate
GetACP
GetStartupInfoA
GetEnvironmentVariableA
GetCurrentThread
gdi32
GetWorldTransform
Rectangle
IntersectClipRect
GetStockObject
SetBrushOrgEx
SetROP2
MoveToEx
GetClipBox
FillPath
CloseFigure
SetGraphicsMode
LineTo
GetGraphicsMode
CreatePatternBrush
PolyBezierTo
EndPath
PolylineTo
BeginPath
SelectClipPath
PolyDraw
setupapi
CM_Get_Depth
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
Sections
.text Size: 103KB - Virtual size: 242KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ