C:\Terminal\Cycle\Port\This.exe
Static task
static1
Behavioral task
behavioral1
Sample
22328efa01606c61b3f930b67e573ec2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
22328efa01606c61b3f930b67e573ec2_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
22328efa01606c61b3f930b67e573ec2_JaffaCakes118
-
Size
198KB
-
MD5
22328efa01606c61b3f930b67e573ec2
-
SHA1
ca0b6a17155698deccdc2d5c74cbfc273b1855dd
-
SHA256
e7deb3681831048bc13be833a59457ee2cea62e8b58ffd1744f28b285cb51a3e
-
SHA512
4ab99a09397349931310c11b232fcb4e799bf63b4a47c28f17fa183be78f3ccafcd03672c2979e4a267750b957204a129b45e823cf3ac6f74a2d628faf6e6ef0
-
SSDEEP
3072:YneXmosZ7lQmJUQBECFx3gv55EmInPwgz0HbOryE/jE+L1PMo4qBHqW:eeXaLVDkbIPqHup/Q0bqW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22328efa01606c61b3f930b67e573ec2_JaffaCakes118
Files
-
22328efa01606c61b3f930b67e573ec2_JaffaCakes118.exe windows:5 windows x86 arch:x86
09caca751b9f4521e1b2b9447979533a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
CreateWindowExW
DrawMenuBar
DrawStateA
CharUpperA
SetFocus
RegisterClassExA
DlgDirSelectExA
MapVirtualKeyA
DlgDirListComboBoxA
SetUserObjectInformationW
DrawStateW
kernel32
GetCommandLineA
MoveFileExA
FlushFileBuffers
CreateDirectoryA
DisconnectNamedPipe
OpenFileMappingW
GlobalFindAtomW
gdi32
GetDIBits
ResizePalette
CreatePalette
CreateEllipticRgn
Polygon
atl
DllRegisterServer
DllUnregisterServer
ole32
CoGetObject
CoGetClassObject
CoGetClassVersion
shlwapi
PathFileExistsA
Exports
Exports
_SetDoubleClickTimeSetDoubleClickTimeSetDoubleClickTime@0
Sections
.uiyjh Size: 1024B - Virtual size: 858B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rttgf Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pytohg Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.kkjhgj Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.kmhjnn Size: 512B - Virtual size: 123B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ