Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_c34b0d10f586817178eb0b1ba22038a1.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_c34b0d10f586817178eb0b1ba22038a1.exe
Resource
win10v2004-20250129-en
General
-
Target
JaffaCakes118_c34b0d10f586817178eb0b1ba22038a1
-
Size
265KB
-
MD5
c34b0d10f586817178eb0b1ba22038a1
-
SHA1
5dec9f902d367a778d6c01fb980ace3ed7556606
-
SHA256
a425d638561a42a1f03f8a85e5914869074ac6b930dcc30d72d49c362e3be52d
-
SHA512
42f48cda1da34b34d9275aa37733d920be25dd733ff42c79525233abf6b6fcb5e710ba4ce9a9c6b0cc59990c235119f67ee853cb0f1a69bc077ab0f9501697d5
-
SSDEEP
6144:Qe+6LUAzWG6Adgrpv3LvXIdjKcrD6EQsj3:Qe+5GE2kcrDc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_c34b0d10f586817178eb0b1ba22038a1
Files
-
JaffaCakes118_c34b0d10f586817178eb0b1ba22038a1.exe windows:4 windows x86 arch:x86
80036ac28425243d1dca143d9760ffaa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceExA
GetCurrentThreadId
CreateDirectoryA
UnhandledExceptionFilter
FindResourceA
EnterCriticalSection
GetThreadLocale
GetProcessHeap
RaiseException
LeaveCriticalSection
GetSystemTimeAsFileTime
HeapAlloc
IsDebuggerPresent
GetACP
LoadResource
lstrlenW
HeapDestroy
WideCharToMultiByte
DeleteCriticalSection
HeapFree
lstrlenA
LockResource
HeapSize
HeapReAlloc
SetUnhandledExceptionFilter
SizeofResource
VirtualAlloc
GetModuleHandleW
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
user32
CharLowerBuffA
UnregisterClassA
cmutil
CmMalloc
CmFree
CmLoadIconW
CmConvertRelativePathW
ntprint
PSetupAssociateICMProfiles
ServerInstallW
PSetupDriverInfoFromName
PSetupCreateMonitorInfo
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.amlfiO Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qdBSBh Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.QfAmuMW Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ieqi Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fvUup Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.auboY Size: 1024B - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.BwDrcs Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ufOnG Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 213KB - Virtual size: 939KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.LExynae Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jGnl Size: 1024B - Virtual size: 963B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mGvG Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ