Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_8a492858eacd2218d0a9ae8e1ce614fc.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_8a492858eacd2218d0a9ae8e1ce614fc.exe
Resource
win10v2004-20250314-en
General
-
Target
JaffaCakes118_8a492858eacd2218d0a9ae8e1ce614fc
-
Size
56KB
-
MD5
8a492858eacd2218d0a9ae8e1ce614fc
-
SHA1
249ead92fb8a02510fc4a88a8b7ca74783c73252
-
SHA256
3a8fdfb6d243b3ff54730906f43d39198c3b964cede9621caf7e0a6a95319439
-
SHA512
8e67c893703656aec23878f77972a0a61ecbc5b5bb8620a7b0441d11777d78c4a3bb746033809138b0aa934c120d06f62d52675cf23ac3c946c3c5d825510a7e
-
SSDEEP
1536:8DLazmEBaQj7G5ToPQ6+5PAKOF5ywCrVWqqxMdh9b:HzmEBaQcTYQ6pTyPr2WdhR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_8a492858eacd2218d0a9ae8e1ce614fc
Files
-
JaffaCakes118_8a492858eacd2218d0a9ae8e1ce614fc.exe windows:4 windows x86 arch:x86
b06952eaceaf01c08ed76212b52ad9db
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
_chkstk
_vsnprintf
strcat
isalpha
memset
strcpy
strstr
strlen
RtlUnwind
_stricmp
memcpy
kernel32
GetVolumeInformationA
CreateFileA
MapViewOfFile
UnmapViewOfFile
HeapAlloc
GetCurrentProcess
HeapFree
WaitForSingleObject
SetEvent
GetCurrentThread
GetProcessHeap
ExpandEnvironmentStringsA
GetWindowsDirectoryA
WriteFile
GetCommandLineA
OpenProcess
WideCharToMultiByte
Sleep
CreateEventA
CreateProcessA
TerminateProcess
GetSystemDirectoryA
GetLastError
SetLastError
DeviceIoControl
GetLongPathNameA
LoadLibraryA
CreateFileMappingA
GetSystemInfo
GetModuleHandleA
CreateMutexA
GetVersionExA
CloseHandle
GetProcessAffinityMask
SetThreadAffinityMask
GetProcAddress
advapi32
FreeSid
AllocateAndInitializeSid
LookupPrivilegeValueA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
OpenThreadToken
OpenProcessToken
AdjustTokenPrivileges
CheckTokenMembership
msvcrt
??1exception@@UAE@XZ
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler3
_CxxThrowException
__CxxFrameHandler
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE