D:\InfoFolderData\WindowsInternalFile
Static task
static1
Behavioral task
behavioral1
Sample
30d8cfa7509168edad468b3b61b618ac_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
30d8cfa7509168edad468b3b61b618ac_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
30d8cfa7509168edad468b3b61b618ac_JaffaCakes118
-
Size
173KB
-
MD5
30d8cfa7509168edad468b3b61b618ac
-
SHA1
355dd21d69f349fa2519116f00144ef3b3c09082
-
SHA256
a7fa07db116a7b7ec5dcabc4d485b1473f5abb26ca546b1d5f94c8f53306a5c4
-
SHA512
0447f052e72c266962e25c77db2a83f74a29d759a083d1df788eb1acafbf93256efbd7f0708f2b1997bd2491de0f57f747825e64f7de15d8e1fc4b844f0698e6
-
SSDEEP
3072:1oLGVv0ELXu/0LSyRBlomem7JiUeSB/6Q3kmSJTT+s6K2kKcRFLcOvqUlC8UBt0u:1oS5HLuWT3lomiUeSB/6Q3wKpK2KFwsa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30d8cfa7509168edad468b3b61b618ac_JaffaCakes118
Files
-
30d8cfa7509168edad468b3b61b618ac_JaffaCakes118.exe windows:5 windows x86 arch:x86
56b23cf1f409f858d0c0dad5f7490287
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
LookupIconIdFromDirectory
InflateRect
OemToCharA
DrawFrameControl
GetMonitorInfoW
GetDesktopWindow
TrackPopupMenuEx
SystemParametersInfoA
IsWindowEnabled
GetCaretPos
GetTopWindow
kernel32
lstrcmpA
SuspendThread
OpenFileMappingW
SetThreadAffinityMask
GetCurrentDirectoryA
OpenFileMappingA
LocalSize
CreateFileW
GetFileAttributesExW
BuildCommDCBA
Exports
Exports
?DrawAnimatedRectsDrawAnim
Sections
.text Size: 127KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tertr Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fggf Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.errte Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fghghj Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.weerw Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vbgnb Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdgfg Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.cvffg Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.retr Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rewrtr Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vbcb Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wqewq Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ