Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_b815adf1356fe79d0725d9206c4fe8de.exe
Resource
win10v2004-20250410-en
General
-
Target
JaffaCakes118_b815adf1356fe79d0725d9206c4fe8de
-
Size
235KB
-
MD5
b815adf1356fe79d0725d9206c4fe8de
-
SHA1
a3efc104cc279760ddc1352bfc18401ed370be45
-
SHA256
1a63c81d2139fdd80446640566d3453d8b3055f06041d1e8269b2ada78bd8933
-
SHA512
09228995cdffb79afa7adaa33fc711a4ae4db59759d161be6a7a8da7e8695948b45adb5720ab3d418767184c992bb185bdfdf095e0fefedd7919b2fa0725dc85
-
SSDEEP
3072:IUgB1IDkLnDaj0lTjCHCzdtZ8pmuaJlQwvV0ruNbAFQUTkscK80YlOJD1:KBrDDaj0lPqKFDJlQ0cmAGClKK1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_b815adf1356fe79d0725d9206c4fe8de
Files
-
JaffaCakes118_b815adf1356fe79d0725d9206c4fe8de.exe windows:4 windows x86 arch:x86
b77b36fc66537bbf5e81f897c054e72d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
GetProcAddress
LoadLibraryA
HeapAlloc
GetLastError
HeapFree
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
Sleep
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ