Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_de266125e5b360b433f41a276fa17bdf.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_de266125e5b360b433f41a276fa17bdf.exe
Resource
win10v2004-20250207-en
General
-
Target
JaffaCakes118_de266125e5b360b433f41a276fa17bdf
-
Size
252KB
-
MD5
de266125e5b360b433f41a276fa17bdf
-
SHA1
5683c2991e1eef9ac3fd19bf82ebefe42f007852
-
SHA256
3182b6bbcb126faf3540681c4f88867d37fab437b4b4592aef89a5e9bed1203a
-
SHA512
47524f5a5668bf2befca01fa0a70f738f96662aff7616f58ed9725e58bbe9a59075dca9619d907ce4efd6ece0db0cf1b844c1fe4438079724cbf3563e1c0d61f
-
SSDEEP
6144:MId079u0236C/DkLqMAo74a3l/wOjjf0jF1zLYpH/XRe:REALkuMAojYO30jFOpH/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_de266125e5b360b433f41a276fa17bdf
Files
-
JaffaCakes118_de266125e5b360b433f41a276fa17bdf.exe windows:4 windows x86 arch:x86
8e4ffada0d4bb5946be829009347cc79
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
lstrcpynA
lstrlenA
GetLastError
GetFullPathNameA
GetFileAttributesA
lstrcpynW
lstrlenW
GetFileAttributesW
FreeLibrary
MultiByteToWideChar
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
Sleep
LocalFree
GetTickCount
GetModuleFileNameW
GetVersionExW
LocalAlloc
LoadLibraryW
GetLocalTime
GetProcAddress
LoadLibraryA
user32
EnableWindow
SetForegroundWindow
SendMessageW
GetMenuState
ShowCaret
CreateAcceleratorTableW
SetTimer
GetMenuItemID
GetMenuInfo
PostMessageW
GetCapture
CreateDesktopA
GetSubMenu
wsprintfA
CreateDialogIndirectParamW
LoadMenuW
AppendMenuA
CharPrevA
SetWindowTextW
SetDlgItemInt
TrackPopupMenuEx
GetForegroundWindow
GetSysColor
TrackPopupMenu
IsWindow
LoadIconA
wsprintfW
GetDlgItemTextA
GetMessageW
DialogBoxParamA
AdjustWindowRect
GetCursorPos
CopyIcon
MonitorFromPoint
CreateDialogParamA
GetKeyState
SetCursor
CharNextA
SetDlgItemTextW
GetDCEx
advapi32
RegCreateKeyExW
RegEnumKeyW
RegSetValueExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegDeleteKeyW
RegDeleteKeyA
shell32
SHGetDesktopFolder
security
SealMessage
CompleteAuthToken
gdi32
CreatePolygonRgn
CreateScalableFontResourceW
StretchDIBits
GetTextExtentPointA
SelectBrushLocal
CreateFontIndirectExA
AddFontResourceW
Sections
.text Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xSHu Size: 2KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xCaD Size: 104KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.G Size: 4KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oBZ Size: 5KB - Virtual size: 464KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 379KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Pi Size: 105KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ