C:\CurrentData\Modify\ApplicationNew
Static task
static1
Behavioral task
behavioral1
Sample
fe00c9cc9e7e659199d6eb68552b9d95_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fe00c9cc9e7e659199d6eb68552b9d95_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
fe00c9cc9e7e659199d6eb68552b9d95_JaffaCakes118
-
Size
168KB
-
MD5
fe00c9cc9e7e659199d6eb68552b9d95
-
SHA1
78d8d17fa0ee1c1a72aef88ed2290007998d178d
-
SHA256
25b0fac1f92b7a7b613f9aa30c8bc6275f9b0b414be54c57d1a9d915e85d5ccf
-
SHA512
6c7550fc1f90e2edfe55fcde044a4de5c133ff8454bb8bf2df34425666f2c098ef018103bc7856cf8a4d870bc0cd4b93dde44aafaf5d33880969ae8f618bd674
-
SSDEEP
3072:0LcWpgVgw0A6Iyx41nHSA+IVNXeA5/vrGRfgz4kuONPEWwKXTt+LZ1o8xut:0LciLA6IyxYHSA+ITXeA5XrGRIhfN8S6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe00c9cc9e7e659199d6eb68552b9d95_JaffaCakes118
Files
-
fe00c9cc9e7e659199d6eb68552b9d95_JaffaCakes118.exe windows:5 windows x86 arch:x86
720b74d05af168cdb9b3c9f57e09ed37
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
GetStockObject
CreateFontA
Polyline
SetPixel
CombineRgn
GetROP2
GetPaletteEntries
PtVisible
CreateRectRgn
StretchBlt
CreateBitmap
kernel32
SetNamedPipeHandleState
EnumResourceNamesW
GetTickCount
GetSystemDefaultUILanguage
LoadLibraryW
LoadLibraryA
GetSystemDefaultLangID
VirtualQuery
OpenFileMappingW
IsBadStringPtrA
OpenFileMappingA
ClearCommBreak
lstrcpynA
GetUserDefaultLangID
lstrcatA
advapi32
AllocateLocallyUniqueId
Exports
Exports
?GetUserObjectSecurityGetUserObjectSecu
Sections
.text Size: 157KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.wrew Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.werty Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hfgg Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rertyt Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iuyyt Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ