F:\ggmK\eDEiwwsErqHj4\dioagFE\Dqncyze.sib
Static task
static1
Behavioral task
behavioral1
Sample
222d8b6931e1ade5611f8ba0c767a63d_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
222d8b6931e1ade5611f8ba0c767a63d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
222d8b6931e1ade5611f8ba0c767a63d_JaffaCakes118
-
Size
146KB
-
MD5
222d8b6931e1ade5611f8ba0c767a63d
-
SHA1
479d32146801cb8d128d9db1586581e7c2e5a2b5
-
SHA256
849e05815c04f74449ec0d56a72c048583da0669c9c9b632eb4274fd00af0df5
-
SHA512
893c93aab4e98f4383bd5ff76e39fac6f2fae638e1c8ee635aea0a254f0d3ae1f329abf7bbb63f01e00bfdf4d408127f26e4e58eb9df995b065a5cfc1320a139
-
SSDEEP
3072:SYirgpzj86LEm7KAsnn75lHFgjIEqOlwjaeyDhBclIwSFmhbbE:SGJj/CAsn7lgEEq0ZeyDzcbp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 222d8b6931e1ade5611f8ba0c767a63d_JaffaCakes118
Files
-
222d8b6931e1ade5611f8ba0c767a63d_JaffaCakes118.exe windows:5 windows x86 arch:x86
3b98eb63e7901b0394fcc4f6735973cd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
PathParseIconLocationA
StrStrW
PathCompactPathExW
ord158
PathFindNextComponentW
ChrCmpIW
kernel32
LoadLibraryExW
GetSystemTimeAdjustment
SetFileApisToOEM
SetProcessShutdownParameters
GlobalFix
SetupComm
lstrlenA
lstrcmpiA
LoadLibraryW
GetTapePosition
SetMessageWaitingIndicator
CreateJobSet
lstrcpyA
OpenSemaphoreA
CancelWaitableTimer
GetModuleHandleExA
SetMailslotInfo
GetCommState
user32
CharUpperA
GetClipCursor
CopyImage
GetSubMenu
DrawTextW
GetWindowRect
GetClientRect
GetForegroundWindow
GetMenu
SetLastErrorEx
GetAltTabInfoA
RedrawWindow
MapWindowPoints
AdjustWindowRect
GetDialogBaseUnits
GetClipboardOwner
CreateCursor
ModifyMenuA
gdi32
PlayEnhMetaFileRecord
SetArcDirection
SetBkColor
GetEnhMetaFileBits
GetFontData
CreateRectRgn
GetTextCharsetInfo
GetRgnBox
CreateFontIndirectW
DeleteEnhMetaFile
SetViewportExtEx
Exports
Exports
?_DrawFocusRect@@YGKPAD0PAG@Z
?_FillRect@@YGKPAD0@Z
?_FrameRect@@YGPAXPAKPAEPAI@Z
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.itext Size: 1024B - Virtual size: 643B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RData Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CData Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 750B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ