Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_12a10a7aa42f9fcf935f7031c4204423.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_12a10a7aa42f9fcf935f7031c4204423.exe
Resource
win10v2004-20250217-en
General
-
Target
JaffaCakes118_12a10a7aa42f9fcf935f7031c4204423
-
Size
226KB
-
MD5
12a10a7aa42f9fcf935f7031c4204423
-
SHA1
e257132ad9439c70bd85e9a20e9ce4b4d6b52e20
-
SHA256
986ebdcaa26e87e5c727581577dd071b96a26fafd619bc08cc7a37e911d9c63b
-
SHA512
d7a572e108d1ece23e711605552695cd9f01116ae7796b4c23b0f2e18c927469563f12cb7ff4e770ab95e266b3c0835a137a80d0bbf82f09299b87c352e684ca
-
SSDEEP
6144:sk1yV4XORu/CJEakAQxKrntFxtu1/zSftEhq:70yNOkAwK5FL+/pq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_12a10a7aa42f9fcf935f7031c4204423
Files
-
JaffaCakes118_12a10a7aa42f9fcf935f7031c4204423.exe windows:4 windows x86 arch:x86
26500eca4e17841fdba3cc63f6c5b025
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeCriticalSection
GetDiskFreeSpaceW
IsBadStringPtrA
lstrcmp
CreateDirectoryW
OpenMutexW
GetSystemDefaultLangID
GetProcAddress
DosDateTimeToFileTime
GetVolumeInformationW
GetCalendarInfoA
SetEvent
LoadLibraryA
user32
CharUpperW
LoadIconA
wsprintfW
SetParent
GetSubMenu
GetSystemMetrics
GetMenuStringW
GetMenuState
CreateDialogIndirectParamA
CreateCaret
GetMenu
CopyImage
UpdateLayeredWindow
DefDlgProcW
LoadCursorA
GetSysColorBrush
GetClassNameA
GetTopWindow
IsCharUpperA
gdi32
SetViewportOrgEx
CreateFontIndirectExA
PlayMetaFile
GetBrushOrgEx
Chord
GdiGetBatchLimit
GetEnhMetaFilePaletteEntries
CopyEnhMetaFileW
GetLayout
GetDCBrushColor
GetCharWidth32W
StretchDIBits
UpdateICMRegKeyW
AbortDoc
SetWindowOrgEx
Escape
GetMapMode
SetDCBrushColor
GetTextExtentPointW
SetICMProfileA
CreateDCA
advapi32
RegSaveKeyA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyW
shell32
ExtractIconEx
ExtractAssociatedIconA
StrChrA
StrStrIW
StrChrIA
StrRChrA
Shell_NotifyIcon
SHGetDataFromIDListA
StrRStrIA
StrChrIW
ShellExecuteW
shlwapi
SHAutoComplete
SHOpenRegStreamA
PathIsNetworkPathW
PathRemoveArgsW
StrChrW
StrDupW
PathIsUNCServerShareW
PathRemoveFileSpecW
StrStrA
SHRegDuplicateHKey
StrFormatByteSizeA
StrCmpLogicalW
SHCopyKeyA
StrSpnA
PathUnquoteSpacesA
UrlCreateFromPathW
SHCreateStreamOnFileW
SHOpenRegStream2A
opengl32
glNormal3f
glPixelStoref
glVertex4d
glTexCoord2i
Sections
.JFSSv Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.b Size: 4KB - Virtual size: 162KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mdXp Size: 1KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CNwl Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.PKBwvI Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.LUQFce Size: 1024B - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.PZFBmd Size: 3KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.kEA Size: 5KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vBZ Size: 4KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RpM Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 345KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ