Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_8dc8fcb44700be07a86ded511d7ac5cf.exe
Resource
win7-20250207-en
Behavioral task
behavioral2
Sample
JaffaCakes118_8dc8fcb44700be07a86ded511d7ac5cf.exe
Resource
win10v2004-20250314-en
General
-
Target
JaffaCakes118_8dc8fcb44700be07a86ded511d7ac5cf
-
Size
125KB
-
MD5
8dc8fcb44700be07a86ded511d7ac5cf
-
SHA1
f72248d2fc2b0f4ff33a44cde972630995548ad0
-
SHA256
b952827b99ce59a51c726d10677e1785324195846a06c705a82b5ae801222929
-
SHA512
1817fc76aa5abfb870a62bfdd985fb7b4af122bd048fc467ef47ceb7b0d831a7a59d538b0fd9c1337a389426e0f6ece0e5e7fcd9d070cceab96df725614e70f0
-
SSDEEP
3072:vC9jTXtO2TgIOJZ1iEZcfQps2zGy0LYc:vC9PXFIJZ1iEZWQpLzXW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_8dc8fcb44700be07a86ded511d7ac5cf
Files
-
JaffaCakes118_8dc8fcb44700be07a86ded511d7ac5cf.exe windows:5 windows x86 arch:x86
804f74e8ec9423f11989d8eb8632cc10
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileAttributesA
CreateMailslotW
IsBadWritePtr
GetModuleHandleA
GetDriveTypeW
FindClose
GetFileAttributesA
GetProcessHeap
GetTickCount
IsValidCodePage
HeapSize
ResetEvent
FindResourceA
VirtualProtect
SetLastError
CancelIo
RemoveDirectoryA
CreateDirectoryA
MapViewOfFile
GetLocaleInfoA
GetExitCodeThread
user32
DispatchMessageA
PostMessageW
GetWindowTextW
LoadCursorA
SetCursor
PeekMessageA
LoadImageW
GetCapture
SetFocus
IsWindow
IsDialogMessageA
GetWindowLongW
wsprintfA
ipsmsnap
DllUnregisterServer
DllGetClassObject
DllGetClassObject
DllCanUnloadNow
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE