D:\InfoFolderData\WindowsInternalFile
Static task
static1
Behavioral task
behavioral1
Sample
1af38b602a4f0e91cac9bdc22d940c8d_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1af38b602a4f0e91cac9bdc22d940c8d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1af38b602a4f0e91cac9bdc22d940c8d_JaffaCakes118
-
Size
173KB
-
MD5
1af38b602a4f0e91cac9bdc22d940c8d
-
SHA1
5f3205e5f8e55550b2bb3fb5a1475d3e3d7b5f1e
-
SHA256
f12de4e51fbb9302fa82bf86b1c3652f7cea9d5baa560ca16e855beba8cbc4ce
-
SHA512
2a3f7069190886f3861a79a0d423062e6f023d0677edbb780e288b375a0c404458df8e9c97aaa473b95313f856df6e778e2a98a4133f6a0a8be8ecae8c1838e0
-
SSDEEP
3072:6oMgc7iJlN+wIUSxZvmQBQc+Cm2Z/wezJzB3M2kKcRFnhndON3KaW:6ok7iJlvInbvtBQpCmI/wezJd3M2KFMa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1af38b602a4f0e91cac9bdc22d940c8d_JaffaCakes118
Files
-
1af38b602a4f0e91cac9bdc22d940c8d_JaffaCakes118.exe windows:5 windows x86 arch:x86
56b23cf1f409f858d0c0dad5f7490287
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
LookupIconIdFromDirectory
InflateRect
OemToCharA
DrawFrameControl
GetMonitorInfoW
GetDesktopWindow
TrackPopupMenuEx
SystemParametersInfoA
IsWindowEnabled
GetCaretPos
GetTopWindow
kernel32
lstrcmpA
SuspendThread
OpenFileMappingW
SetThreadAffinityMask
GetCurrentDirectoryA
OpenFileMappingA
LocalSize
CreateFileW
GetFileAttributesExW
BuildCommDCBA
Exports
Exports
?DrawAnimatedRectsDrawAnim
Sections
.text Size: 127KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tertr Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fggf Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.errte Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fghghj Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.weerw Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vbgnb Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdgfg Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.cvffg Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.retr Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rewrtr Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vbcb Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wqewq Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ