C:\Hello\Insert\Data\File.exe
Static task
static1
Behavioral task
behavioral1
Sample
72244a35bb51c70b723e36bc18378383_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
72244a35bb51c70b723e36bc18378383_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
72244a35bb51c70b723e36bc18378383_JaffaCakes118
-
Size
188KB
-
MD5
72244a35bb51c70b723e36bc18378383
-
SHA1
eb2a26b25d5e8a661217252614c89f71b69bfd7d
-
SHA256
13885671631109c054008d02bf94e79bcf97403a9aafa00b0ce256f0d4a6bca9
-
SHA512
847a7aba6b034eb641eeb6af4982296da6d489c345c4db2ef5d59ab0abdc826435ce312bd024c367a6e0963e5d6f1514ba618f90ab7fed06d0290c394d765dad
-
SSDEEP
3072:kaHOkAIcJ6+JT8CRi1JFZrV9WmPzGyYpyFxKFSi2wasCUFanidSi4B9EF:xOkA/JFJACiTFVGmLnFxKnasC+5r4B9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72244a35bb51c70b723e36bc18378383_JaffaCakes118
Files
-
72244a35bb51c70b723e36bc18378383_JaffaCakes118.exe windows:5 windows x86 arch:x86
3cfb418a0322148619c2ec2c596acd4f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
SetWindowOrgEx
SetBitmapBits
CreateFontIndirectA
CreateRectRgn
GetTextExtentPointA
GetSystemPaletteEntries
SetAbortProc
DeleteObject
CreateDiscardableBitmap
SetViewportExtEx
EndPage
kernel32
GetSystemDirectoryA
SetHandleCount
GetPriorityClass
AddAtomA
GetSystemWindowsDirectoryW
GetBinaryTypeW
LeaveCriticalSection
GetShortPathNameA
FindClose
ClearCommBreak
CreateThread
CreateFileW
SystemTimeToFileTime
GetExitCodeThread
CreateFileA
Sections
.text Size: 154KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ