2.Dpd
Static task
static1
Behavioral task
behavioral1
Sample
88681bb3b49290e33b7308bcdae0ccba_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
88681bb3b49290e33b7308bcdae0ccba_JaffaCakes118
-
Size
108KB
-
MD5
88681bb3b49290e33b7308bcdae0ccba
-
SHA1
d053e82d60e4343bd77be48a58ac3805f6c4a79d
-
SHA256
5630e54e14f2a42feac50f07c4d00d6fb567f24b1c45b263ac6fe95f5b04802b
-
SHA512
ae92aa490bc764e5c846186c0ca4cb32185556f631d793b037269178f90b4e23b16d1de278792df207b38ea86f381fca0b78b64309c285f099f52889e0e51f18
-
SSDEEP
3072:OIfHsePvv21vvvvvvvvvvtvvvvvvvvvvvvvvvvvvlvv2Lvvvvvvvvvv/vGbvvPvh:xUeqb0osYZQ5Jd52+2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88681bb3b49290e33b7308bcdae0ccba_JaffaCakes118
Files
-
88681bb3b49290e33b7308bcdae0ccba_JaffaCakes118.exe windows:5 windows x86 arch:x86
2cf73c9ea3d86eb8c4536c1e7009fad4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM
PDB Paths
Imports
kernel32
GetBinaryTypeA
GetModuleFileNameA
GetModuleHandleA
GetNumberOfConsoleInputEvents
FlsFree
lstrcmpA
GetLastError
ConvertFiberToThread
FlushConsoleInputBuffer
clusapi
ClusterResourceCloseEnum
user32
EnumDisplaySettingsW
GetWindowTextA
GetMenuItemInfoA
MessageBoxA
GetShellWindow
gdi32
GetPaletteEntries
SelectPalette
SetGraphicsMode
advapi32
GetCurrentHwProfileA
msi
ord30
oleaut32
GetAltMonthNames
ole32
CoRevokeInitializeSpy
setupapi
SetupFreeSourceListW
urlmon
CoInternetIsFeatureZoneElevationEnabled
shlwapi
ord10
Sections
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CODE Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ