F:\xJdK\mtxarSwspxwN4\nXHszaE\cgMaese.Abb
Static task
static1
Behavioral task
behavioral1
Sample
d5d66407314fe17fc62ea3bff52a29e1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d5d66407314fe17fc62ea3bff52a29e1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d5d66407314fe17fc62ea3bff52a29e1_JaffaCakes118
-
Size
145KB
-
MD5
d5d66407314fe17fc62ea3bff52a29e1
-
SHA1
8e8f747aa9098c41435ab36ff7c864c41f29b166
-
SHA256
beb3662274ffd6bc493a2771d868fb7892dd421e54eabd4e94a60f1007d80ad1
-
SHA512
aa739ecd14ade43e6cb55bb882387d09245d956e22d975cd1889a17861d16c296cd8aa0dd0c19057afe630c338f75e0c914a7bf0e73259081267edbfd95ecd5f
-
SSDEEP
3072:JQnpFp35GYErsqbZA1IVVvCYgkZ7TdNrESMGwpt:mp735Gv7bZzVVqYbf1kG2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5d66407314fe17fc62ea3bff52a29e1_JaffaCakes118
Files
-
d5d66407314fe17fc62ea3bff52a29e1_JaffaCakes118.exe windows:5 windows x86 arch:x86
f1310f7ed2f0c5c27b6e2860538c44d1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
PathParseIconLocationA
StrStrW
PathCompactPathExW
kernel32
SetupComm
lstrlenA
GetCommState
LoadLibraryW
GlobalFix
SetMessageWaitingIndicator
CreateJobSet
lstrcpyA
GetSystemTimeAdjustment
LoadLibraryExW
OpenSemaphoreW
lstrcmpiW
CreateFileMappingA
MapViewOfFile
GetModuleHandleExW
GetTapePosition
user32
CharUpperA
GetClipCursor
CopyImage
GetSubMenu
DrawTextW
GetWindowRect
GetClientRect
GetForegroundWindow
GetMenu
SetLastErrorEx
GetAltTabInfoA
RedrawWindow
AdjustWindowRect
GetDialogBaseUnits
ModifyMenuA
GetClipboardOwner
DestroyCursor
MapWindowPoints
gdi32
GetEnhMetaFileHeader
SetMiterLimit
SetDCBrushColor
SetViewportOrgEx
GetFontData
CreateRectRgn
GetTextCharsetInfo
GetRgnBox
CreateFontIndirectW
DeleteEnhMetaFile
SetEnhMetaFileBits
Exports
Exports
?_DrawFocusRect@@YGKPAD0PAG@Z
?_FillRect@@YGKPAD0@Z
?_FrameRect@@YGPAXPAKPAEPAI@Z
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.itext Size: 1024B - Virtual size: 643B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RData Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CData Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 706B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ