Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_0fe27e55aa23355f44e8ba1896ee9d90.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_0fe27e55aa23355f44e8ba1896ee9d90.exe
Resource
win10v2004-20250217-en
General
-
Target
JaffaCakes118_0fe27e55aa23355f44e8ba1896ee9d90
-
Size
239KB
-
MD5
0fe27e55aa23355f44e8ba1896ee9d90
-
SHA1
f41ff09079ed308ba794d12887a354e7ec5f0b40
-
SHA256
4bd6e92a53236cfeca89553b9139c62b71fc218412842126cabaadc93f696ef8
-
SHA512
8780e1bfab214ac0b6c47757dd2b09994c3d019370977615cf3e2bfee2cdbb8104b3fdd5101913657e3c59f73c6d2f9ed22de597d3d650b7e657c01d9eac6d24
-
SSDEEP
6144:XcfqGJSFKnLQXBgBrX227mz4DgAxOvKWr8:stJS40x0pDgAxOv/8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_0fe27e55aa23355f44e8ba1896ee9d90
Files
-
JaffaCakes118_0fe27e55aa23355f44e8ba1896ee9d90.exe windows:4 windows x86 arch:x86
0588f48c7b1164ff13de43125ba5c153
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
crypt32
CryptUnprotectData
CryptProtectData
rpcrt4
RpcRevertToSelf
RpcImpersonateClient
RpcRevertToSelfEx
kernel32
lstrlenW
GetProcessHeap
CreateFileW
WaitForSingleObject
VirtualFree
FindResourceW
CopyFileW
WriteFile
WaitForMultipleObjects
HeapAlloc
MoveFileExW
HeapReAlloc
SetFileAttributesW
GetFileSize
FlushFileBuffers
GetTempFileNameW
SizeofResource
lstrlenA
OutputDebugStringW
HeapSize
SetFilePointer
FindResourceExW
DeleteCriticalSection
ReadFile
EnterCriticalSection
UnhandledExceptionFilter
GetCurrentThreadId
RaiseException
LocalAlloc
HeapFree
GetSystemInfo
WideCharToMultiByte
LockResource
FreeLibrary
OpenMutexW
HeapDestroy
LeaveCriticalSection
CloseHandle
LocalFree
IsDebuggerPresent
GetSystemTimeAsFileTime
DeleteFileW
LoadLibraryExW
SetUnhandledExceptionFilter
LoadResource
VirtualAlloc
CreateMutexW
VirtualAllocEx
user32
CharNextW
wsprintfW
ole32
IIDFromString
CoCreateGuid
StringFromGUID2
mscms
CreateColorTransformW
IsColorProfileTagPresent
InternalGetPS2ColorSpaceArray
GetStandardColorSpaceProfileW
InstallColorProfileA
SetColorProfileHeader
DisassociateColorProfileFromDeviceA
vbscript
DllRegisterServer
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.cC Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ZxGK Size: 512B - Virtual size: 842B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ozlYlq Size: 512B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 213KB - Virtual size: 415KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ