Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_e99d0379b8dbcb6dbcf95d2f7901ec37.exe
Resource
win7-20250207-en
Behavioral task
behavioral2
Sample
JaffaCakes118_e99d0379b8dbcb6dbcf95d2f7901ec37.exe
Resource
win10v2004-20250207-en
General
-
Target
JaffaCakes118_e99d0379b8dbcb6dbcf95d2f7901ec37
-
Size
249KB
-
MD5
e99d0379b8dbcb6dbcf95d2f7901ec37
-
SHA1
674f0d6fbfb2253b9455fa3139d7debe9b6ed2cd
-
SHA256
0f0b5810b3d576e86a69b649bd20829ba538ba71e8d1f8c75fe478ca625319eb
-
SHA512
1945659d3a03b2ad1de7a9dbcc6d5001d0323f4ad304ea235b990f6065397c760b7783d896c1e51f6aa945b02ac1d787e0f9bdaea3392ecf44f2640facfc21f5
-
SSDEEP
6144:8PnkMwb+DWF3ayNbxB+m3dsYfNdPhTr4E6A3cK:8kMwb+DWYsq54d5TXPcK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_e99d0379b8dbcb6dbcf95d2f7901ec37
Files
-
JaffaCakes118_e99d0379b8dbcb6dbcf95d2f7901ec37.exe windows:4 windows x86 arch:x86
aae25621ff5404665064754134d62b3a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
lstrcpynA
lstrlenA
GetLastError
GetFullPathNameA
GetFileAttributesA
lstrcpynW
lstrlenW
GetFileAttributesW
FreeLibrary
MultiByteToWideChar
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
Sleep
LocalFree
GetTickCount
GetModuleFileNameW
GetVersionExW
LocalAlloc
LoadLibraryW
CreateMutexA
GetProcAddress
LoadLibraryA
user32
EnableWindow
SetForegroundWindow
SendMessageW
LoadCursorA
InvalidateRgn
OffsetRect
RegisterWindowMessageA
GetSysColorBrush
DestroyCursor
keybd_event
LoadMenuW
GetClassInfoW
CreateDialogParamW
CopyIcon
MessageBoxIndirectW
MonitorFromPoint
DestroyIcon
SetFocus
ShowCursor
GetMenu
RemoveMenu
GetClassInfoExA
WinHelpW
TrackPopupMenu
GetWindowRgn
LoadMenuA
CreateDesktopW
SetActiveWindow
IsIconic
GetMenuStringA
InvalidateRect
EndDialog
InsertMenuItemW
RegisterClassW
CreateMenu
CreatePopupMenu
InsertMenuItemA
GetMenuItemCount
GetSysColor
wsprintfW
InsertMenuA
CharUpperA
GetScrollPos
DestroyMenu
WaitMessage
GetCaretPos
LoadBitmapW
GetKeyboardType
EmptyClipboard
FindWindowW
advapi32
RegCreateKeyExW
RegEnumKeyW
RegSetValueExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegDeleteKeyW
RegDeleteKeyA
shell32
SHGetDesktopFolder
samlib
SamCloseHandle
SamFreeMemory
gdi32
ExtCreateRegion
CreateFontIndirectExW
CreatePen
CreateFontW
GetTextExtentPointA
SetEnhMetaFileBits
CreateFontA
CreateRoundRectRgn
CreateSolidBrush
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.al Size: 98KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.XIErNg Size: 1KB - Virtual size: 397KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Lx Size: 4KB - Virtual size: 382KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.L Size: 116KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.KOZgK Size: 512B - Virtual size: 183KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ