Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_8b125d0a76255af76c50f50aa2e038e2.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_8b125d0a76255af76c50f50aa2e038e2.exe
Resource
win10v2004-20250313-en
General
-
Target
JaffaCakes118_8b125d0a76255af76c50f50aa2e038e2
-
Size
281KB
-
MD5
8b125d0a76255af76c50f50aa2e038e2
-
SHA1
470f3059b16664f3d1afe98f68fb3c74bc69a2a3
-
SHA256
33c2feff987d0c0ed7539c9b13157df28c5cc7e19393852c4cfa5e3c3a81738a
-
SHA512
0f9bb6acd6ca7562b49dc8ca3564f8823e5482f326af89fb958abbc885af184e48639dee15a94b9e9ba9b3d72f720464afe3cd3cc010f9ed7bba1d342cd61817
-
SSDEEP
6144:+u6Uz378LjeuIEPg7DRGqMl0T6ok6p/tJBmHe7Zc:aI2cnRGqMyTzTJBm+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_8b125d0a76255af76c50f50aa2e038e2
Files
-
JaffaCakes118_8b125d0a76255af76c50f50aa2e038e2.exe windows:4 windows x86 arch:x86
6b1f5584df0383bfb54a8c6ff0e85be6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
kernel32
lstrcmpA
GetStartupInfoA
GetLastError
FreeEnvironmentStringsW
AddAtomA
GetCurrentThreadId
LCMapStringW
CreateFileA
WriteFile
GetModuleHandleA
lstrcpynA
lstrcatA
WideCharToMultiByte
LeaveCriticalSection
InitializeCriticalSection
MultiByteToWideChar
GetEnvironmentStrings
FindFirstFileA
GetStringTypeW
GetOEMCP
GetCPInfo
UnhandledExceptionFilter
GetThreadLocale
EnumResourceNamesW
SetStdHandle
lstrlenA
FlushFileBuffers
lstrcmpiA
SetUnhandledExceptionFilter
IsBadReadPtr
GetDiskFreeSpaceA
LoadLibraryA
LCMapStringA
SetFilePointer
IsBadCodePtr
GetFileAttributesA
EnterCriticalSection
FreeEnvironmentStringsA
DeleteCriticalSection
GetFullPathNameA
lstrlenW
GetTickCount
GetStringTypeA
VirtualProtect
FreeLibrary
lstrcpyA
Sleep
GetEnvironmentStringsW
MulDiv
ReadFile
GetProcAddress
CloseHandle
RaiseException
Sections
.text Size: 139KB - Virtual size: 283KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ