C:\Terminal\Cycle\Port\This.exe
Static task
static1
Behavioral task
behavioral1
Sample
a3d201205470217d6bbbda9e61938656_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a3d201205470217d6bbbda9e61938656_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a3d201205470217d6bbbda9e61938656_JaffaCakes118
-
Size
198KB
-
MD5
a3d201205470217d6bbbda9e61938656
-
SHA1
fa785b604e6e2894a69f7f8b0026e9cb0f22d475
-
SHA256
36c39a330c2c811e9e0778cf5ba4fae2bf1948325236ffd23c0793e7e5841f04
-
SHA512
1409e6c06473c685275ade024b80a5653e65ba9167c7469aed2a7d8fd694ebf2cb60f7d0e125158463ecc02d334d28edb0010fe8bbdfb24eb720c78e126824e3
-
SSDEEP
3072:2wjtaLFYtydMwoBcZs6WbcSBvzFbPDC7kfeOZw/P4XlvTcjyEVX1mMo4qBHq:v0KtoMwsc1ZSBpbPG7kfQ41v+zAbq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3d201205470217d6bbbda9e61938656_JaffaCakes118
Files
-
a3d201205470217d6bbbda9e61938656_JaffaCakes118.exe windows:5 windows x86 arch:x86
09caca751b9f4521e1b2b9447979533a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
CreateWindowExW
DrawMenuBar
DrawStateA
CharUpperA
SetFocus
RegisterClassExA
DlgDirSelectExA
MapVirtualKeyA
DlgDirListComboBoxA
SetUserObjectInformationW
DrawStateW
kernel32
GetCommandLineA
MoveFileExA
FlushFileBuffers
CreateDirectoryA
DisconnectNamedPipe
OpenFileMappingW
GlobalFindAtomW
gdi32
GetDIBits
ResizePalette
CreatePalette
CreateEllipticRgn
Polygon
atl
DllRegisterServer
DllUnregisterServer
ole32
CoGetObject
CoGetClassObject
CoGetClassVersion
shlwapi
PathFileExistsA
Exports
Exports
_SetDoubleClickTimeSetDoubleClickTimeSetDoubleClickTime@0
Sections
.uiyjh Size: 1024B - Virtual size: 858B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 163KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rttgf Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pytohg Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.kkjhgj Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.kmhjnn Size: 512B - Virtual size: 123B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ