Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_5644984adc53e7dbe992dacbde5f5ac8.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_5644984adc53e7dbe992dacbde5f5ac8.exe
Resource
win10v2004-20250217-en
General
-
Target
JaffaCakes118_5644984adc53e7dbe992dacbde5f5ac8
-
Size
108KB
-
MD5
5644984adc53e7dbe992dacbde5f5ac8
-
SHA1
a247fc6f2089ed89897856e658206e0b20c08446
-
SHA256
36b5715f49df231de49bc68d491e1675c47f2d79819dbb77fdb5801233e1183d
-
SHA512
e26ec5d3dfce69ae3734929b5318719e46e4b1c9c0204b854869b5c3c25370b406017ba26d81c6695278238a5c9e6fcb1feb4868512a20afabc1860577e3f45f
-
SSDEEP
1536:TKvhGAoP37Wtul3mW7BpnDUeQHF1rgcLfLxa12pFcx+0z5pre/+a:WvEAo/7tl3mGn4eCF1rjfLxa6W5LrQZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_5644984adc53e7dbe992dacbde5f5ac8
Files
-
JaffaCakes118_5644984adc53e7dbe992dacbde5f5ac8.exe windows:4 windows x86 arch:x86
72ce95e9b565778f5e0e16aafb55f42e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GetACP
LCMapStringA
LCMapStringW
WideCharToMultiByte
HeapReAlloc
VirtualAlloc
HeapAlloc
GetStringTypeW
GetStringTypeA
GetLastError
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFileAttributesA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetCPInfo
FreeLibrary
GetOEMCP
WriteFile
MultiByteToWideChar
GetEnvironmentStringsW
GetEnvironmentStrings
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
HeapFree
RtlUnwind
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
user32
MessageBoxA
LoadStringA
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
ole32
OleInitialize
OleUninitialize
version
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.0rdata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE