D:\MyFolder\X Project\Temporary\Space\Unknown
Static task
static1
Behavioral task
behavioral1
Sample
c805b3e4e438e968b9e995674cdfc006_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c805b3e4e438e968b9e995674cdfc006_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c805b3e4e438e968b9e995674cdfc006_JaffaCakes118
-
Size
171KB
-
MD5
c805b3e4e438e968b9e995674cdfc006
-
SHA1
27e70cdc3fdef7f14b40761a61c6ec245ce5a810
-
SHA256
ec212f57c51b4f69bedc4ba1e09d13af7f470aab48a8a4e40323168358ce0753
-
SHA512
2c0bef4e22ea03f41e7c7d8ae440530027d893a35e941af162a383f0bb87bfb2c01688961bba4d9f4a3e27360154cd3a245f5cccac59b90c39fa425729a904a2
-
SSDEEP
3072:xysacnXERlEj0BebnY5GbugaNfvQ4t8nPSqti6JK3N/C21mjz1ko:x0gXYxBMUGCfo4WBHJeFR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c805b3e4e438e968b9e995674cdfc006_JaffaCakes118
Files
-
c805b3e4e438e968b9e995674cdfc006_JaffaCakes118.exe windows:5 windows x86 arch:x86
24ed036259c15dcdc5d17376f59e8286
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
SetWindowOrgEx
SetTextAlign
SetViewportExtEx
GetBitmapBits
GetMapMode
GetDIBits
EnumFontFamiliesExW
OffsetViewportOrgEx
GetNearestPaletteIndex
GetTextExtentPointW
SetBitmapDimensionEx
user32
FlashWindow
ShowOwnedPopups
FindWindowExA
MoveWindow
CreateMenu
kernel32
lstrlenA
SetCurrentDirectoryA
ResumeThread
LoadLibraryExW
GetThreadTimes
WriteFile
GetStartupInfoW
VirtualProtect
TerminateThread
lstrcpynA
GetSystemInfo
GetFileType
FindCloseChangeNotification
Exports
Exports
?SetPointerT
Sections
.text Size: 146KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yutyrt Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hjgjgf Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hgffds Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uytytr Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cxcx Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ