Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_1ad043f4482bd65efb19f39b882b7e82.exe
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_1ad043f4482bd65efb19f39b882b7e82
-
Size
324KB
-
MD5
1ad043f4482bd65efb19f39b882b7e82
-
SHA1
20e11dad6b7ad71dd9d0dac9eedbe77c3a363697
-
SHA256
12530ec18d59d273926303c4b92400f6d46e0c8d10105328a48df8d4329b4eac
-
SHA512
03937e63a96b8ef093e45eb2eabe85473e171f1f82e06554c0542b21adb6018c27a9f00dfb71423fba67643c1786b26f7b57e528225aea9f3072f684f427f677
-
SSDEEP
6144:MiLsP0cENTm7aYR5vJTvR0ZA1wBH8EdL5FW/SZ13VlSnO+PEeL0WYey1KvP:MtMlZ8wBcEdtFii13DuLFL0WYevH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_1ad043f4482bd65efb19f39b882b7e82
Files
-
JaffaCakes118_1ad043f4482bd65efb19f39b882b7e82.exe windows:4 windows x86 arch:x86
e304217fc16c011615a0ec22783cbfae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
SearchPathA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
user32
DefWindowProcA
AdjustWindowRectEx
Sections
0 Size: 248KB - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 48KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE