N:\vbaK\AJfRffgafoLn4\gjratwE\CTyEYAe.bmb
Static task
static1
Behavioral task
behavioral1
Sample
09b12c2234256a9d077f8118a4f3eb99_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
09b12c2234256a9d077f8118a4f3eb99_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
09b12c2234256a9d077f8118a4f3eb99_JaffaCakes118
-
Size
86KB
-
MD5
09b12c2234256a9d077f8118a4f3eb99
-
SHA1
27e8c2cd11901343648c3aec8568e691b5016c0b
-
SHA256
a5d6dba77171a68b63bcf842e99d5c04b8224404248ad29e6e75fed355708a5b
-
SHA512
4e06b96b8b07f62927e0b121cc1bd80f2ab62b64b43eb0cc5806e2e1407c4eeac1db1d6483fed4e9529b2fcc4b1b548e60cdf1de4cf1effd9ac26861f8e6f79e
-
SSDEEP
1536:hc0YYPzgU1SmavvFI5vkTeFjBEAwCRy1r+LpOc1EEXPFIHsJYAGE:hH/l1gt+vHVBEys1ApOc1ZPKHE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09b12c2234256a9d077f8118a4f3eb99_JaffaCakes118
Files
-
09b12c2234256a9d077f8118a4f3eb99_JaffaCakes118.exe windows:5 windows x86 arch:x86
dac167f812c467ff768b50eb222dec52
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
ChrCmpIW
ord158
PathCompactPathExW
StrStrW
StrCmpNA
PathMatchSpecA
PathFindNextComponentW
kernel32
lstrcmpiA
LoadLibraryExW
GetModuleHandleW
GetSystemTimeAdjustment
OpenSemaphoreA
GlobalFix
SetupComm
lstrcpynA
GetCommState
LoadLibraryW
GetTapePosition
SetMessageWaitingIndicator
IsBadWritePtr
lstrcatA
CreateJobSet
CancelWaitableTimer
SetMailslotInfo
GetModuleHandleExA
CreateHardLinkW
user32
CopyImage
GetWindowTextLengthW
InvalidateRgn
GetDialogBaseUnits
GetClipboardOwner
CreateCursor
GetClientRect
SetLastErrorEx
SetRect
GetAltTabInfoA
EnableMenuItem
MapWindowPoints
GetCursorPos
gdi32
DeleteEnhMetaFile
CreateFontIndirectW
GetRgnBox
GetTextCharsetInfo
CreateRectRgn
GetFontData
GetEnhMetaFileBits
PlayEnhMetaFileRecord
SetArcDirection
SetBkColor
SetViewportExtEx
Exports
Exports
?_ChildWindowFromPoint@@YGKPAD0@Z
?_ChildWindowFromPointEx@@YGKPAD0PAG@Z
?_WindowFromPhysicalPoint@@YGPAXPAKPAEPAI@Z
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.icode Size: 1024B - Virtual size: 643B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.m_data Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CData Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
NData Size: 1024B - Virtual size: 532B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 792B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ