C:\Folder\Random\Path\FileName
Static task
static1
Behavioral task
behavioral1
Sample
854b6ff9e88283e9cda3a92e061e54e9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
854b6ff9e88283e9cda3a92e061e54e9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
854b6ff9e88283e9cda3a92e061e54e9_JaffaCakes118
-
Size
161KB
-
MD5
854b6ff9e88283e9cda3a92e061e54e9
-
SHA1
d07b9852a51782c74d25734bb33928f4cfb519b3
-
SHA256
87a49a419968bbb9677f6c9ceefb11791780b79714e23b1a740bc9f160182282
-
SHA512
3db7f17fd39509a492121df43c0dce313d3886e2ef5ecb5e187d2d0871d7c46047cb4ee1c2b74d7e49e147cf39672d288d67e8f8c1bdade0ff97d037b969be0f
-
SSDEEP
3072:eXeyvzv/rwCd7UmzyAg6bHYUPBTeK74+UminWg2dEqV1UEMWGjJ+S:CeUv//7Fzyhm4A4yinWJdrSE3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 854b6ff9e88283e9cda3a92e061e54e9_JaffaCakes118
Files
-
854b6ff9e88283e9cda3a92e061e54e9_JaffaCakes118.exe windows:5 windows x86 arch:x86
b92d9d9f630642b98687c8b0a5e1e3bb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
OpenIcon
GetForegroundWindow
GetMenuState
FindWindowW
IsWindow
kernel32
DeleteAtom
GetPriorityClass
GetSystemWindowsDirectoryA
VirtualQuery
CopyFileW
GetFileType
LCMapStringW
GetProcAddress
GetThreadLocale
SetEndOfFile
LoadLibraryA
FileTimeToSystemTime
Sleep
Exports
Exports
?GetLocalSystemAccount
Sections
.text Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hghjg Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uiuyiou Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vhg Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ujiuiu Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jkihh Size: 512B - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ