C:\Hello\Insert\Data\File.exe
Static task
static1
Behavioral task
behavioral1
Sample
DeskBabes_Install.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
DeskBabes_Install.exe
Resource
win10v2004-20240802-en
General
-
Target
b46e1c3fdaa2ba79bb248205e5f7c658_JaffaCakes118
-
Size
150KB
-
MD5
b46e1c3fdaa2ba79bb248205e5f7c658
-
SHA1
891fc51d20d15c4f379f898a6546762778ab40e3
-
SHA256
c58396e80ec08683696ae65ff3c146fd7a9773e2904e305a4c26cfe5438b33e8
-
SHA512
1b50224c4604489edfc418e2cd9b70e35cc55f6752e74c1bc67bb1479e4db40a76e114c4bf78eeaa0696422b2455067765943da34b601494047f0f75f912c925
-
SSDEEP
3072:HY5YTZlBa+Iiu6tL6lFkVfIyG+3yY/pHr1hWE2Gm7SfenTUBB7i9i38rAr7kbU:HY5Y97dnbVflbjR47SuUBp6i380r77
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/DeskBabes_Install.exe
Files
-
b46e1c3fdaa2ba79bb248205e5f7c658_JaffaCakes118.zip
-
DeskBabes_Install.exe.exe windows:5 windows x86 arch:x86
89641684c099e026c6a1de144361bd0e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
iswspace
strspn
_controlfp
__set_app_type
__p__fmode
__p__commode
_amsg_exit
_initterm
_ismbblead
localtime
_XcptFilter
_exit
_cexit
isupper
__setusermatherr
__getmainargs
strncpy
gdi32
SetWindowOrgEx
SetBitmapBits
CreateRectRgn
GetTextExtentPointA
GetSystemPaletteEntries
DeleteObject
CreateDiscardableBitmap
kernel32
OpenFileMappingA
GetSystemDefaultLangID
FindClose
SetFilePointer
CreateFileA
GetCommState
ClearCommBreak
OpenFileMappingW
ExitThread
SetSystemTime
GetPriorityClass
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ