Lfgxoumvksc
Static task
static1
Behavioral task
behavioral1
Sample
5c214ef16935947638e0462a3253c201_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5c214ef16935947638e0462a3253c201_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5c214ef16935947638e0462a3253c201_JaffaCakes118
-
Size
29KB
-
MD5
5c214ef16935947638e0462a3253c201
-
SHA1
f433fce7124b27d50f2af88cf095e5cc0ba541eb
-
SHA256
fd301067a67430eaa64e839ee763ffe300243b944b64b624f9691f8f1002651f
-
SHA512
9576a51d9d55d969610ff6f0355df18ba036b24d0a00dc6aeda9dc36bf606194d23a9e158dfc6d31dc3bf41c0773cdd9e05ba94bdee047d26f9aeb0a8b5714cc
-
SSDEEP
384:QS/mpmRfUleXUuoLKo0FZIXG5Tzg9QX/oLf0TRRiLzQ0wM5hT+zxebH:QNmVU4XoLj0zq4zyreRiP535IF+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c214ef16935947638e0462a3253c201_JaffaCakes118
Files
-
5c214ef16935947638e0462a3253c201_JaffaCakes118.exe windows:4 windows x86 arch:x86
f3add3286ffe3707b642aa26e25741f9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetTempPathA
CloseHandle
GetStartupInfoA
VirtualProtect
FatalExit
user32
IsDlgButtonChecked
GetWindowRgnBox
Exports
Exports
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.datatxt Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ldata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdsec Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.kdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ