C:\Terminal\Cycle\Port\This.exe
Static task
static1
Behavioral task
behavioral1
Sample
0fa988b0ed1972d38055f07abd2e7d22_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0fa988b0ed1972d38055f07abd2e7d22_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0fa988b0ed1972d38055f07abd2e7d22_JaffaCakes118
-
Size
197KB
-
MD5
0fa988b0ed1972d38055f07abd2e7d22
-
SHA1
8946e7f20f89341c968c764156010523a354dd92
-
SHA256
7656550f24f9f142ef35efa76e456e7fbc0a99bed6dba88b55b283d175df83cf
-
SHA512
d440146f2cfa48d2e709306502fa19440cd3f5b3d28a3dc5edae6418db37cdc266d371d3e499655a897917c6949e7f2cc655e928bd603b78aacd995d585658d4
-
SSDEEP
6144:Jzg4q0orDuwg61LH1BkHFWUycKUUvvBi:dg4q0orl1GlWUni
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fa988b0ed1972d38055f07abd2e7d22_JaffaCakes118
Files
-
0fa988b0ed1972d38055f07abd2e7d22_JaffaCakes118.exe windows:5 windows x86 arch:x86
b82cbbdc0733665aae63a394408f31a3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ole32
CoInitialize
kernel32
SetThreadContext
AddAtomW
IsBadReadPtr
ClearCommError
Sleep
ReleaseSemaphore
user32
SetClassLongW
GetWindowTextA
RegisterClassW
TrackPopupMenuEx
GetClassLongA
SwapMouseButton
GetWindowLongA
GetClipCursor
ReleaseDC
InvalidateRect
IsCharLowerA
shlwapi
PathFindExtensionA
Exports
Exports
_CallWindowProcACallWindowProcA@0
Sections
.fdgfsd Size: 1024B - Virtual size: 558B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 159KB - Virtual size: 159KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rteytr Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.njhg Size: 512B - Virtual size: 99B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reteef Size: 1024B - Virtual size: 520B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ