?SetupReference@[SXH_KK]V
Static task
static1
Behavioral task
behavioral1
Sample
d0c93fb04ce74195b65067e92bf0c972_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0c93fb04ce74195b65067e92bf0c972_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d0c93fb04ce74195b65067e92bf0c972_JaffaCakes118
-
Size
133KB
-
MD5
d0c93fb04ce74195b65067e92bf0c972
-
SHA1
a484d7aee9bc8ce1e1eb897b66ae527697a861c1
-
SHA256
6bb1ef63b50d872e597a6eed54fc907ac6c021cdd810e01cbc7aa18efdd5a5b7
-
SHA512
16f733da8698ac2821b93066e60e258b7b1bb1975ba5221055686088ab7bd2305fdc361b05e158e8068b67dc4b88bc1581df9f93a09bf65e4228aa692b8edfbe
-
SSDEEP
3072:mxy0Q1l5iCPSKj9nRtoFY33iQf1I0cXEwNpzo9MoFrU:mxEiDOyG3iC1Ix/zo9fr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0c93fb04ce74195b65067e92bf0c972_JaffaCakes118
Files
-
d0c93fb04ce74195b65067e92bf0c972_JaffaCakes118.exe windows:5 windows x86 arch:x86
3884b90b28519d576cfcf9865cfe8511
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
ord29
PathCompactPathExW
kernel32
lstrlenA
LoadLibraryExW
lstrlenW
GetModuleHandleW
Exports
Exports
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.piano Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ