D:\InfoFolderData\WindowsInternalFile
Static task
static1
Behavioral task
behavioral1
Sample
5e5a57e39fe8010ff25009425ab642d2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5e5a57e39fe8010ff25009425ab642d2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e5a57e39fe8010ff25009425ab642d2_JaffaCakes118
-
Size
173KB
-
MD5
5e5a57e39fe8010ff25009425ab642d2
-
SHA1
ef6cffc993e541fa7e8de06c88672e3f3c7e8749
-
SHA256
c95aec86546223a074a0a81a2cae7196b5d594b6fedb02793a125d6112b595f0
-
SHA512
159248e8795186fbef7c78505b2080cd2fe8a833453ddbfae8c3fc4d03b8fe48c37d67fe5d4bc39fe9019d829523ac22d1c90aa961f27e70b21a540ed3d5a68c
-
SSDEEP
3072:3+bIQKo8S+AyWhjS/tCcmgUSWC2HoRL6K7Sw0/kka2asLgzc65:3OKo81AyWhjS/gxnCgoR/7Zt2SgA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e5a57e39fe8010ff25009425ab642d2_JaffaCakes118
Files
-
5e5a57e39fe8010ff25009425ab642d2_JaffaCakes118.exe windows:5 windows x86 arch:x86
628c9a1b4cbf6f68b802f31223b7bca7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
RectVisible
GetDIBits
EnumFontFamiliesW
GetPaletteEntries
GetROP2
PatBlt
BeginPath
CreatePalette
Rectangle
CreateDIBSection
GetCharWidth32W
kernel32
BuildCommDCBA
GetFileAttributesExW
OpenFileMappingW
GetCurrentDirectoryA
VerifyVersionInfoW
SetMailslotInfo
OpenFileMappingA
LocalReAlloc
SuspendThread
CreateFileW
GetFileSize
FlushViewOfFile
GetLocaleInfoW
SetPriorityClass
SearchPathW
SetThreadAffinityMask
Exports
Exports
?GetMessageGetMess
Sections
.text Size: 127KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rewrd Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ewrdf Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cvbb Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cxdzb Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lityf Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lugvf Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ewref Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bnbvn Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.errgy Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mcdeo Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rtre Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vcnhb Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ