E:\Install Path\SendSMS\Main\SubFolder\Includes\InfoApp
Static task
static1
Behavioral task
behavioral1
Sample
a50940fdfd7a2db975d9b14e8baf635a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a50940fdfd7a2db975d9b14e8baf635a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a50940fdfd7a2db975d9b14e8baf635a_JaffaCakes118
-
Size
166KB
-
MD5
a50940fdfd7a2db975d9b14e8baf635a
-
SHA1
0d0543b8a981404bb45987b6fea94cabcfeac08b
-
SHA256
c40e01f14587e693fa625d3bd025fd44015624d7de70da0b4156f789fa7f001e
-
SHA512
a106ad4cb714d7df2e7e5fe6fa3138361604816aaea36208e950e91326545abecb5c5e530b271776d9817cc67a4f6222e87d1ea07ab473db51120f99e75333ab
-
SSDEEP
3072:zJM2txEPaPK7DChcKsUG9j7P8WVzHluxvpqDLzqDv8J9d2+Bbd2MtKoK+:zztyPaPKccJZ8WV8SLzy8A+tU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a50940fdfd7a2db975d9b14e8baf635a_JaffaCakes118
Files
-
a50940fdfd7a2db975d9b14e8baf635a_JaffaCakes118.exe windows:5 windows x86 arch:x86
60490a30aa1626c5d13b2f7f489fcfb5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
SetWindowPos
MoveWindow
DestroyMenu
kernel32
GetCPInfo
GlobalGetAtomNameA
SetNamedPipeHandleState
EnumResourceTypesA
GetModuleFileNameW
GetLocaleInfoA
GetTempFileNameW
GetLongPathNameW
AddAtomA
GetFileAttributesExA
FindNextFileA
OpenFileMappingA
CreateDirectoryA
GetNumberFormatA
lstrlenW
SetHandleCount
GlobalMemoryStatus
Exports
Exports
?CloseWindowStationCloseWi
Sections
.text Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vars4 Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vptr4 Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 83KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ