C:\Terminal\Cycle\Port\This.exe
Static task
static1
Behavioral task
behavioral1
Sample
c10d4a6b710440aa95c855a202469e4e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c10d4a6b710440aa95c855a202469e4e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c10d4a6b710440aa95c855a202469e4e_JaffaCakes118
-
Size
196KB
-
MD5
c10d4a6b710440aa95c855a202469e4e
-
SHA1
4eca358dc41c2f88e2893b8a2b2795362231ceab
-
SHA256
5e7d5ed616020ddcee00250c993056c31c75982d4523d1395736cecb4f54b78a
-
SHA512
cef5837ea3ff84d4474c28d320031636507c21c2af3d6e61063308d5c1126e7ac3214e5636d3cb0dec47286b2e9fbe1574c40a5f367a8d68e8d8cf8c995c288a
-
SSDEEP
3072:fB+6r/prU3g535kMbz7lGbWfGbyWjZvU3WXYhlbM67Ck5mwcYGP:fB+exPybIGbyUZvlmlkkkH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c10d4a6b710440aa95c855a202469e4e_JaffaCakes118
Files
-
c10d4a6b710440aa95c855a202469e4e_JaffaCakes118.exe windows:5 windows x86 arch:x86
b82cbbdc0733665aae63a394408f31a3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ole32
CoInitialize
kernel32
SetThreadContext
AddAtomW
IsBadReadPtr
ClearCommError
Sleep
ReleaseSemaphore
user32
SetClassLongW
GetWindowTextA
RegisterClassW
TrackPopupMenuEx
GetClassLongA
SwapMouseButton
GetWindowLongA
GetClipCursor
ReleaseDC
InvalidateRect
IsCharLowerA
shlwapi
PathFindExtensionA
Exports
Exports
_CallWindowProcACallWindowProcA@0
Sections
.fdgfsd Size: 1024B - Virtual size: 558B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rteytr Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.njhg Size: 512B - Virtual size: 99B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reteef Size: 1024B - Virtual size: 520B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ