Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_8f8fd5d0d36f9ba69f0cf6f5625f5122.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_8f8fd5d0d36f9ba69f0cf6f5625f5122.exe
Resource
win10v2004-20250314-en
General
-
Target
JaffaCakes118_8f8fd5d0d36f9ba69f0cf6f5625f5122
-
Size
125KB
-
MD5
8f8fd5d0d36f9ba69f0cf6f5625f5122
-
SHA1
e1b838ff61dada1d0b561df9f7e8582405c7b873
-
SHA256
74654a15bac6b00970ecf8eb8a4048066f85e124b734e1d635e07b85cc518493
-
SHA512
8faf5eb6b0c2f6afd835796b5d2a7aeee5fd1186bd9c7fc64e9d1f33a6530ce6bcebb86a52708f264d59610482a5087bba85b90995a2ee7d26bd78cff2a7a06c
-
SSDEEP
1536:RW2fkoLOAxY6ebPa4cwR420jRnbpcmBP1gGoUtVanaYQTOZYUTS6Qv8Jy:A4koLOAL40JbCmB176yqVep8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_8f8fd5d0d36f9ba69f0cf6f5625f5122
Files
-
JaffaCakes118_8f8fd5d0d36f9ba69f0cf6f5625f5122.exe windows:5 windows x86 arch:x86
b77bef3603e41f42827c6abab1f95070
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcessHeap
RemoveDirectoryA
GetFileAttributesA
GetFileAttributesA
GetLocaleInfoA
IsValidCodePage
GetDriveTypeW
CreateDirectoryA
ResetEvent
CancelIo
SetLastError
GetTickCount
IsBadWritePtr
GetExitCodeThread
GetModuleHandleA
VirtualProtect
FindClose
MapViewOfFile
FindResourceA
CreateMailslotW
HeapSize
user32
LoadImageW
PostMessageW
PeekMessageA
GetWindowTextW
SetCursor
IsWindow
DispatchMessageA
GetCapture
GetWindowLongW
IsDialogMessageA
SetFocus
LoadCursorA
wsprintfA
ipsmsnap
DllUnregisterServer
DllGetClassObject
DllGetClassObject
DllCanUnloadNow
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE