D:\InfoFolderData\WindowsInternalFile
Static task
static1
Behavioral task
behavioral1
Sample
5b36d26f5823de320ada40d50f5279f3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5b36d26f5823de320ada40d50f5279f3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b36d26f5823de320ada40d50f5279f3_JaffaCakes118
-
Size
173KB
-
MD5
5b36d26f5823de320ada40d50f5279f3
-
SHA1
9507153dd7ab508705a65fbbf4e03cb1c1872534
-
SHA256
0ab0e610f52f113364657cf425a05e25e6094f9e4316d231687b435de706a63f
-
SHA512
d198ca268c8ba51f9e412d0a07d7db6a6d27b39ad57423ccb0ba3731d6cad9aeebca2f241750dc43b3a1c051d26f83b1945c7d85414d124e861eb00bdc5b9567
-
SSDEEP
3072:d3dU0bbXJ+NbcNRZsVGU/jSA0Nlk7xL+alMdwFh7+L6K7SwdEouUq3Vt4j7IP:d3drbjjfkjSAEqL+aCsh7+/7Z2y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b36d26f5823de320ada40d50f5279f3_JaffaCakes118
Files
-
5b36d26f5823de320ada40d50f5279f3_JaffaCakes118.exe windows:5 windows x86 arch:x86
d9c019a03157db2245274625882e0333
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
DrawIcon
GetDlgItemTextA
SetScrollInfo
IsDialogMessageW
GetDCEx
CharUpperBuffW
DispatchMessageW
GetWindowTextW
DrawFocusRect
GetDlgItemTextW
kernel32
OpenFileMappingW
OpenFileMappingA
BuildCommDCBA
GetSystemInfo
GetThreadTimes
GetFileTime
GetCurrentDirectoryW
BuildCommDCBW
CreateFileW
GetWindowsDirectoryA
FormatMessageA
Exports
Exports
?GetMessageGetMess
Sections
.text Size: 118KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rewrd Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ewrdf Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cvbb Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cxdzb Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lityf Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lugvf Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ewref Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bnbvn Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.errgy Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mcdeo Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rtre Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vcnhb Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ