D:\Information\Desktop\Windows\OS_Starter.exe
Static task
static1
Behavioral task
behavioral1
Sample
a01ef57ca06c5266494a0d3bc5f3a9de_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a01ef57ca06c5266494a0d3bc5f3a9de_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a01ef57ca06c5266494a0d3bc5f3a9de_JaffaCakes118
-
Size
191KB
-
MD5
a01ef57ca06c5266494a0d3bc5f3a9de
-
SHA1
8dc4848a72500d3223fd5520b2b9762b2800e591
-
SHA256
f86cb202624207608aba45d0457cfd8be7560fd6a156c321fda5176d8f4581d6
-
SHA512
6ca092bc447baaf8e58efde08dfc074d9e7e54a0a722036462f3a7acc68e3c9c2dd695103dc05b4e849fed513e3e7f23935c8a47e15fda59fc7ae3d623d12573
-
SSDEEP
3072:gvbBiUDuzSEOtN3yzHzBqf43j0v3vPsh5V8C0xHwcBDzX7SV1wweTqCYeozX:gvkJuEOtN3yzR9h5V8xBwcBHX7ooqC6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a01ef57ca06c5266494a0d3bc5f3a9de_JaffaCakes118
Files
-
a01ef57ca06c5266494a0d3bc5f3a9de_JaffaCakes118.exe windows:5 windows x86 arch:x86
9141ca4c738aba36c87b7b06439a7237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
strncpy
mbstowcs
_cexit
wcscoll
remove
_exit
__p__fmode
__setusermatherr
_XcptFilter
__p__commode
__set_app_type
_controlfp
_initterm
_ismbblead
exit
_amsg_exit
__getmainargs
strchr
printf
shlwapi
PathFileExistsA
kernel32
GetTimeFormatW
CreateEventW
GetSystemInfo
FindResourceExA
IsDBCSLeadByteEx
lstrcmpiA
DeviceIoControl
SetCommTimeouts
SetLocalTime
DefineDosDeviceW
Exports
Exports
_DefWindowProcWDefWindowProcWDefWindowProcWDefWindowProcWDefWindowProcW@TUrD�(�E
Sections
.fgghg Size: 1024B - Virtual size: 518B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 157KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.uytu Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ