Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_a1d292ac0c0273df4f9cf50f780bf40c.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_a1d292ac0c0273df4f9cf50f780bf40c.exe
Resource
win10v2004-20250129-en
General
-
Target
JaffaCakes118_a1d292ac0c0273df4f9cf50f780bf40c
-
Size
250KB
-
MD5
a1d292ac0c0273df4f9cf50f780bf40c
-
SHA1
6f61daae6c110741bf63598a5a97aa269794b40c
-
SHA256
00cc12ebb80a2a1dd606ed36e59bcfd0f7cfcdaff10d63dbe8c41d7d436f5d38
-
SHA512
eeef9e3e91ab995e83a9cd1543c3b3c2b7c55611a15552f71a08091def1b98764803c0f09d191abc7dc7a8d05d381b3e40aa701049de1c7e4cf817f85ba904c8
-
SSDEEP
6144:m9aL+TmziO5hMpMGcWkOICB4F00XFVjJlyby9MMMMMMfMMMMh:z+CziO5hMmG7tBYJlybyD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_a1d292ac0c0273df4f9cf50f780bf40c
Files
-
JaffaCakes118_a1d292ac0c0273df4f9cf50f780bf40c.exe windows:4 windows x86 arch:x86
b71fac9fa2abc955f53fe9d262972eb6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mapi32
ord137
ord140
ord75
ord17
ord136
kernel32
GetCurrentThreadId
GetCurrentProcessId
GetModuleFileNameW
IsBadReadPtr
InitializeCriticalSection
Sleep
RaiseException
TlsAlloc
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCurrentProcess
GetTickCount
CreateMutexW
GetProcAddress
LoadLibraryA
advapi32
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
ole32
CoCreateInstance
inseng
DownloadFile
PurgeDownloadDirectory
GetICifRWFileFromFile
rnr20
NSPStartup
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 2KB - Virtual size: 377KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
CODE Size: 101KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 2KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.aspack Size: 119KB - Virtual size: 210KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ