04b3423959eba454be36293cad05e6fb_JaffaCakes118
- SHA256 be5a169d4a405e93ee9b59e75704b594a3856a5289c0596fe80c45059d0f3b9c
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
documenty.exe
Resource
win7-20240220-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
documenty.exe
Resource
win10v2004-20240419-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target 04b3423959eba454be36293cad05e6fb_JaffaCakes118
- Size 88KB
- Sample240428-jk2lysbb27
- SHA256 be5a169d4a405e93ee9b59e75704b594a3856a5289c0596fe80c45059d0f3b9c
- MD5 04b3423959eba454be36293cad05e6fb
- SHA1 0437e4d6ca083c279483d65e36823382e2d9b9f5
- SHA512 1cf42862457ba1caedabcf107e6b12d065f0d596d4a2beb918f4d6b92111da1ed8dbf402aba8ed8cd580321385971e7f329be3d2243e46e1106bd8f41fb18122
- SSDEEP 1536:WN25HqKy75aXT1ZLDlWbZAyUH6CJTfhczBEmoHtFx2tnrhmi+rfzY0CkCR5:WUlGCri6aCJTfhczBEjHP6sTvMkCR5
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/documenty.exe
File Explorer
-
04b3423959eba454be36293cad05e6fb_JaffaCakes118.rar 88KB
-
documenty.exe.exe 158KB
documenty.exe
- IMPHASH 7db5b6d58b526ec4766a75ebf01ce9b9
- SHA256 33b40da6814e5225eeaa538aee73a9c77917ac24bdc1c8c57592d4dec337c755
- MD5 2cb88704385ff41944db176054cff62e
- SHA1 ccc3beb32c709206e290c61f7c36e77a94efe7b7
- SHA512 1ac621924b96bc3e478e92fba0e7e33ba31e301ca00c3e94274ddbc08d333226ea0bd5f1ea61369739a046bdd69ba69a2638e81efa2df04cdf23b8a14ca0fae4
- SSDEEP 3072:bVtTrtfFxU1/jiknp5Xn2VkPvdDJHBQ17uNZl/7E8WMANwXa:bVtTrNFa+knpFn+kPThQ1ql/uwX
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14479
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
DuplicateHandle
EncodeSystemPointer
EnumerateLocalComputerNamesW
ExitProcess
FindAtomW
GenerateConsoleCtrlEvent
GetCommModemStatus
GetCommandLineA
GetConsoleCursorInfo
GetConsoleProcessList
GetMailslotInfo
GetModuleHandleA
GetNamedPipeHandleStateA
GetProcessId
GetThreadContext
GetThreadIOPendingFlag
GetThreadPriorityBoost
GlobalCompact
IsBadHugeWritePtr
IsBadStringPtrA
IsBadStringPtrW
DeleteAtom
LocalSize
PeekNamedPipe
PostQueuedCompletionStatus
ReleaseSemaphore
RemoveVectoredExceptionHandler
RequestWakeupLatency
SetConsoleCursor
SetConsoleCursorPosition
SetConsoleOutputCP
SetConsoleScreenBufferSize
SetEvent
SetHandleInformation
SetInformationJobObject
SetMailslotInfo
SetThreadContext
SetThreadExecutionState
SetThreadLocale
SetThreadPriority
SetUnhandledExceptionFilter
VirtualAlloc
DebugActiveProcess
CreateJobSet
ConvertDefaultLocale
ClearCommError
CancelWaitableTimer
LocalFree
AddAtomA
user32
DdeSetUserHandle
DefFrameProcW
DefWindowProcA
DeleteMenu
DeregisterShellHookWindow
DestroyWindow
DispatchMessageA
DdeQueryStringW
DrawIconEx
DrawMenuBar
EnableScrollBar
FrameRect
GetAltTabInfoW
GetAsyncKeyState
GetClassNameW
GetClipboardData
GetDC
GetKeyState
GetLastActivePopup
GetListBoxInfo
GetMenuBarInfo
GetMenuDefaultItem
GetMenuItemCount
GetMessageA
GetNextDlgGroupItem
GetRegisteredRawInputDevices
GetSysColorBrush
GetSystemMetrics
GetWindowModuleFileNameA
IMPQueryIMEW
InvalidateRect
IsCharAlphaNumericA
IsGUIThread
IsWindowUnicode
LoadCursorA
LoadIconA
MessageBeep
MessageBoxA
MonitorFromPoint
MoveWindow
NotifyWinEvent
OpenClipboard
OpenInputDesktop
PeekMessageW
PostQuitMessage
PostThreadMessageA
PrintWindow
RegisterClassExA
SendDlgItemMessageA
SendMessageA
SendMessageCallbackA
SendMessageW
SendNotifyMessageW
SetActiveWindow
SetClipboardViewer
SetDebugErrorLevel
SetShellWindow
SetThreadDesktop
SetWinEventHook
ShowWindow
TrackPopupMenu
TrackPopupMenuEx
TranslateMessage
UpdateWindow
DdeQueryConvInfo
DdeGetLastError
DdeCreateStringHandleA
DdeConnectList
DdeClientTransaction
DdeAddData
DdeAbandonTransaction
CreateWindowExA
CreateCaret
CopyImage
CloseWindowStation
CheckRadioButton
ArrangeIconicWindows
AllowSetForegroundWindow
DrawAnimatedRects
comdlg32
dwLBSubclass
ddraw
DirectDrawCreateClipper
DSoundHelp
glu32
gluBuild1DMipmaps
rpcrt4
NdrDllRegisterProxy
NdrGetSimpleTypeMemorySize
RpcErrorStartEnumeration
RpcMgmtSetAuthorizationFn
RpcObjectSetInqFn
I_RpcServerSetAddressChangeFn
I_RpcMapWin32Status
winmm
mciSetDriverData
mxd32Message
tid32Message
timeBeginPeriod
timeEndPeriod
wod32Message
DrvGetModuleHandle
Name
.text
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
136KB
Virtual Size
135KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=161, id=19, version=8078,
count=1, id=18, version=8444,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,