?ToolTipManager@@YGH_KEEPAX|U
Static task
static1
Behavioral task
behavioral1
Sample
2412cd49f58b23be5eb5f78646dc37ed_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2412cd49f58b23be5eb5f78646dc37ed_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
2412cd49f58b23be5eb5f78646dc37ed_JaffaCakes118
-
Size
263KB
-
MD5
2412cd49f58b23be5eb5f78646dc37ed
-
SHA1
63b990832cfa25f61ee988508fb954022001ca93
-
SHA256
085a829e7ee6556bcca378318624e7d9b3963713312a1aae21224213518a9cf7
-
SHA512
081b28c2543b0450029016f2dbf11f800f06a9d992897601d2e2ba1cc5b884ff2301e626af26691259e25b1cb43c6b14debdbae0e890e37f29ad62963d7b0901
-
SSDEEP
6144:mkh/2xhoEiX7+9nC4A+zc/ghN2HVJVsHg1v/+mHSVV1+8Kz0ko:mkh+xhPiX7QFXzc/0N21TsKv2mH2V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2412cd49f58b23be5eb5f78646dc37ed_JaffaCakes118
Files
-
2412cd49f58b23be5eb5f78646dc37ed_JaffaCakes118.exe windows:5 windows x86 arch:x86
4b0efb3360766ecd6b8bab6bb1c68a25
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
shlwapi
PathSearchAndQualifyW
kernel32
LoadLibraryA
lstrcmpiA
LoadLibraryExW
GetModuleHandleA
Exports
Exports
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 238KB - Virtual size: 698KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE