?toggleMin@@YGKPA_K@Z
Static task
static1
Behavioral task
behavioral1
Sample
b73438c1ddb244ce4a18234c6d04aaa0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b73438c1ddb244ce4a18234c6d04aaa0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b73438c1ddb244ce4a18234c6d04aaa0_JaffaCakes118
-
Size
310KB
-
MD5
b73438c1ddb244ce4a18234c6d04aaa0
-
SHA1
6cc35aea1607ee2f30784566dcc943c4144053f2
-
SHA256
1ad12a4be2faebf2fe0a7404086ef39d9e4c1fc28ae25227cf354543009f542f
-
SHA512
54c8a3a63726626f07b67f00fa1598436de307fca14d83d97b5b2dd95ceb2ef47b3a0946918e5dc6fe2d00cf4dd02b5ad3fa41cd167af2c098dcbfa16b878fe8
-
SSDEEP
6144:axPuIdqYF6dXjtQPO/xy8J7HOZLmyoY9l2IQ6vXw:a8AAhhyIfdNOO0Xw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b73438c1ddb244ce4a18234c6d04aaa0_JaffaCakes118
Files
-
b73438c1ddb244ce4a18234c6d04aaa0_JaffaCakes118.exe windows:32 windows x86 arch:x86
187dd0057fb8294ed552b809a0788ee6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ord21
ExtractIconW
ord153
ord14
SHEmptyRecycleBinA
kernel32
GetConsoleScreenBufferInfo
FindFirstVolumeW
OpenFileMappingW
ResetEvent
EnumSystemCodePagesW
DefineDosDeviceW
FreeResource
lstrlenA
GetProfileIntW
lstrcpynA
DeleteVolumeMountPointA
GetComputerNameW
GetTickCount
GetPriorityClass
GetSystemWindowsDirectoryA
GetTimeFormatW
SetConsoleCursorPosition
GetBinaryTypeA
GetProfileIntA
GetLastError
user32
GetWindowThreadProcessId
mouse_event
SetWindowTextA
SendMessageTimeoutA
SystemParametersInfoW
FlashWindowEx
DrawStateA
WinHelpA
SetPropW
GetDoubleClickTime
CharPrevW
OemToCharBuffW
RemovePropA
AttachThreadInput
DrawIconEx
DrawTextA
PostQuitMessage
Exports
Exports
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 87B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 219KB - Virtual size: 218KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 1021B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ