C:\CurrentData\Modify\ApplicationNew
Static task
static1
Behavioral task
behavioral1
Sample
b6dbcaf5f602dcdc212f8a7765b3d1eb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b6dbcaf5f602dcdc212f8a7765b3d1eb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b6dbcaf5f602dcdc212f8a7765b3d1eb_JaffaCakes118
-
Size
168KB
-
MD5
b6dbcaf5f602dcdc212f8a7765b3d1eb
-
SHA1
d43856d36cdd5f684b1a19e32f98616fa63ac06e
-
SHA256
8cbe9e4d932eb1fdf725a7bce1700360b839e17dcbf7599d93a58ec5e6419ded
-
SHA512
ff007aa70519ebb3fa1b0c3ff530705ab7970292c84f4e0aaed299b69938e20285c49d703f21c138dab62e694f0dfc35c63a3079897d12a3ede30ffcff9b0033
-
SSDEEP
3072:aLr+YY8+wyBnkYtCfMecwqCxRNf8BpFhSJ9jwyZzdPNRpDTNiEWwKXa6TuSOfAvK:aLrxp+HBkouMa1NweZwyZzdVDTNxS/Th
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6dbcaf5f602dcdc212f8a7765b3d1eb_JaffaCakes118
Files
-
b6dbcaf5f602dcdc212f8a7765b3d1eb_JaffaCakes118.exe windows:5 windows x86 arch:x86
720b74d05af168cdb9b3c9f57e09ed37
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
GetStockObject
CreateFontA
Polyline
SetPixel
CombineRgn
GetROP2
GetPaletteEntries
PtVisible
CreateRectRgn
StretchBlt
CreateBitmap
kernel32
SetNamedPipeHandleState
EnumResourceNamesW
GetTickCount
GetSystemDefaultUILanguage
LoadLibraryW
LoadLibraryA
GetSystemDefaultLangID
VirtualQuery
OpenFileMappingW
IsBadStringPtrA
OpenFileMappingA
ClearCommBreak
lstrcpynA
GetUserDefaultLangID
lstrcatA
advapi32
AllocateLocallyUniqueId
Exports
Exports
?GetUserObjectSecurityGetUserObjectSecu
Sections
.text Size: 157KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.wrew Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.werty Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hfgg Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rertyt Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iuyyt Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ