?toggleMin@@YGKPA_K@Z
Static task
static1
Behavioral task
behavioral1
Sample
d3efbf7b424a8b2c4e48290ccd5e2650_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d3efbf7b424a8b2c4e48290ccd5e2650_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d3efbf7b424a8b2c4e48290ccd5e2650_JaffaCakes118
-
Size
310KB
-
MD5
d3efbf7b424a8b2c4e48290ccd5e2650
-
SHA1
6fbb5b4b5ee61efd89bcd029db75a952ed9f6cbd
-
SHA256
9e898061054813b88fdd567daec986a8bc7e3047e9067299da5ecec59d587f9d
-
SHA512
6d14c8ebfd212e852104f235366a5d6fa76786ab913a2d60396cad06d8569888da0a5e5f6cc2d2cbaa3d32c3c709510f1c08936e08c228339d8d1172b6151bf3
-
SSDEEP
6144:axPuIdqYO6dXjtQPO/xy8J7HOZLmyoY9l2IQ6vXw:a8AvhhyIfdNOO0Xw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3efbf7b424a8b2c4e48290ccd5e2650_JaffaCakes118
Files
-
d3efbf7b424a8b2c4e48290ccd5e2650_JaffaCakes118.exe windows:32 windows x86 arch:x86
187dd0057fb8294ed552b809a0788ee6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ord21
ExtractIconW
ord153
ord14
SHEmptyRecycleBinA
kernel32
GetConsoleScreenBufferInfo
FindFirstVolumeW
OpenFileMappingW
ResetEvent
EnumSystemCodePagesW
DefineDosDeviceW
FreeResource
lstrlenA
GetProfileIntW
lstrcpynA
DeleteVolumeMountPointA
GetComputerNameW
GetTickCount
GetPriorityClass
GetSystemWindowsDirectoryA
GetTimeFormatW
SetConsoleCursorPosition
GetBinaryTypeA
GetProfileIntA
GetLastError
user32
GetWindowThreadProcessId
mouse_event
SetWindowTextA
SendMessageTimeoutA
SystemParametersInfoW
FlashWindowEx
DrawStateA
WinHelpA
SetPropW
GetDoubleClickTime
CharPrevW
OemToCharBuffW
RemovePropA
AttachThreadInput
DrawIconEx
DrawTextA
PostQuitMessage
Exports
Exports
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 87B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 219KB - Virtual size: 218KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 1021B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ