Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_53616e5fe88226e86b5aecdc9299f2e1.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_53616e5fe88226e86b5aecdc9299f2e1
-
Size
188KB
-
MD5
53616e5fe88226e86b5aecdc9299f2e1
-
SHA1
a0c1794dc9f497a8d30c8ad64580bd334f670de1
-
SHA256
e35d2512c32019682a0fcc223e5139ca52ff4d8cca184b8235b1fc4fadb760f4
-
SHA512
5c244ecc8bc45f4d7f5223d2a8668fd0d25d3efe023681d9a255b6cee5090e729d33553c6e27010c24adf46e3648c8eb36700b0290a0ae4bfd8f2e24afc0955e
-
SSDEEP
3072:raQ6DgnWX0kdL49APvyfeGynB4YhJ2fwvZavp3ZfuSus5qHsHTl0Fep+0NjP:pAgnWX0wP0cSEjvw5B0UkE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_53616e5fe88226e86b5aecdc9299f2e1
Files
-
JaffaCakes118_53616e5fe88226e86b5aecdc9299f2e1.exe windows:4 windows x86 arch:x86
4bc1fd3833fbbd9043b4425cf5560f47
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetCurrentProcess
GetLastError
CreateDirectoryA
GetFileAttributesA
DeleteFileA
SetFileAttributesA
GetSystemDirectoryA
GetModuleHandleA
GetProcAddress
Sleep
ExitProcess
LoadLibraryA
GetCurrentDirectoryA
GetTempPathA
MoveFileA
SetFileTime
GetFileTime
GetModuleFileNameA
WriteFile
GetCurrentProcessId
CreateFileA
SleepEx
GetShortPathNameA
ExpandEnvironmentStringsA
CreateEventA
SetUnhandledExceptionFilter
GetCommandLineA
GetCurrentThreadId
IsBadReadPtr
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
GetStartupInfoA
msvcrt
memset
memmove
??2@YAPAXI@Z
srand
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_strlwr
_except_handler3
_ftol
rand
__CxxFrameHandler
_strupr
user32
wsprintfA
CharNextA
GetActiveWindow
FlashWindow
shlwapi
SHDeleteKeyA
ws2_32
getprotobynumber
closesocket
Sections
CODE Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 164KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ