?SetupReference@[SXH_KK]V
Static task
static1
Behavioral task
behavioral1
Sample
85daccd1f19bf5566f862242784e74bc_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
85daccd1f19bf5566f862242784e74bc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
85daccd1f19bf5566f862242784e74bc_JaffaCakes118
-
Size
133KB
-
MD5
85daccd1f19bf5566f862242784e74bc
-
SHA1
cfc7c27715f99cf77a993eb8dadde131dbb17db3
-
SHA256
fcefd61c59af0b04461c7058965990ec1ed4e35a892f13d8d7d6f039e40b7f79
-
SHA512
e6d94f0e06d085cf0e492326603b819a2f7a0c69896928d3e4bf6036273376112af85c32cba9748596b163ed4a39ada940586957f3ee2f240b34da27516b9bd0
-
SSDEEP
3072:Mxy0Q1lQTwQ7cSOiwbXe9LlgeDaiRCNkUnJHTgp9kZ:MxvwQX7wbXQTncJzgje
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85daccd1f19bf5566f862242784e74bc_JaffaCakes118
Files
-
85daccd1f19bf5566f862242784e74bc_JaffaCakes118.exe windows:5 windows x86 arch:x86
50909f4119bc71e5d2172caf74a9cb2d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
ord29
PathCompactPathExW
kernel32
LoadLibraryExW
lstrlenA
GetModuleHandleW
lstrlenW
Exports
Exports
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.piano Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ