Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_c1968a84f67413233615dc8ae809f2c8.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_c1968a84f67413233615dc8ae809f2c8.exe
Resource
win10v2004-20250129-en
General
-
Target
JaffaCakes118_c1968a84f67413233615dc8ae809f2c8
-
Size
552KB
-
MD5
c1968a84f67413233615dc8ae809f2c8
-
SHA1
d5d9075fa4b901257a23e565f5a6c8455a6a21e2
-
SHA256
7191bcd09be407975aecdd44efb327262e19f336b6b9f5a6079f79d5bb784c83
-
SHA512
6790383636c4207a1164b95fbceb3bceb20aaa636f822c6e541b23af36f67f834960427b984f4cb0d23284ce5f15a2c42c0a928bb850647643cbc76a97e56a21
-
SSDEEP
12288:Zu542bSJiC3OoUB5hOYcgDNWN7c9Y4LVF9:Zr2bSQC3ODB5hODaNw4zLL9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_c1968a84f67413233615dc8ae809f2c8
Files
-
JaffaCakes118_c1968a84f67413233615dc8ae809f2c8.exe windows:4 windows x86 arch:x86
cc9b50fee58fad5a108dda469aa71117
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadMenuA
kernel32
HeapCreate
SetEnvironmentVariableA
WaitForSingleObject
CreateThread
VirtualAlloc
GetModuleHandleA
GetProcAddress
LoadLibraryA
VirtualFree
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetLastError
RaiseException
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
HeapReAlloc
Sleep
HeapSize
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
MultiByteToWideChar
GetLocaleInfoA
GetLocaleInfoW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetTimeZoneInformation
CompareStringA
CompareStringW
Sections
.text Size: 96KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 424KB - Virtual size: 423KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ