?CreateHelpDialog@@YGHHHHHHHH#O
Static task
static1
Behavioral task
behavioral1
Sample
32013653120cad9d0420fa8d9cb39a5a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
32013653120cad9d0420fa8d9cb39a5a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
32013653120cad9d0420fa8d9cb39a5a_JaffaCakes118
-
Size
36KB
-
MD5
32013653120cad9d0420fa8d9cb39a5a
-
SHA1
da1fb7155fa4597db956f99795a15a46df55e48a
-
SHA256
b44d20bba706878e1ebeb885970364c8a8bf2941682ac4dca36ebb14ab21af29
-
SHA512
31929043aa18c92fb7deb0745bca6d8c8233cb4098560158820be3551efa8b7d3694e9a2cbab05642576b58a6ce43894cfd520493d93a24bca91149a72db8c79
-
SSDEEP
768:79QPxeoQbBlXbxTem+3hKg2wMVOJgiwQiRqDW86e:79QxeocJim+0g2wMwZwQiL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32013653120cad9d0420fa8d9cb39a5a_JaffaCakes118
Files
-
32013653120cad9d0420fa8d9cb39a5a_JaffaCakes118.exe windows:5 windows x86 arch:x86
96ae9f2e3e32c964fc1f13b2eaec28c0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
shlwapi
PathCompactPathExW
kernel32
CompareStringA
LoadLibraryA
lstrlenW
lstrlenA
Exports
Exports
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE