D:\MyFolder\X Project\Temporary\Space\Unknown
Static task
static1
Behavioral task
behavioral1
Sample
f5182df2a9fdd29742a55919f7560e5a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f5182df2a9fdd29742a55919f7560e5a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f5182df2a9fdd29742a55919f7560e5a_JaffaCakes118
-
Size
163KB
-
MD5
f5182df2a9fdd29742a55919f7560e5a
-
SHA1
038d91ec1cfd7395a1e1afacd34a9d2713cd7974
-
SHA256
4b966d4eae7f40a8c52284498d755e93013ce0f242b9ed130e42dfb0f840002e
-
SHA512
2393c31aa125e7ecb201f5ba54e97da137b4fffcc4c6ecd6a77fab8ae96cba4359375a80bd8e1bbd69cc283547b9c56aa8bfe1cd8ad21ac9dafcbcb227aa9e9f
-
SSDEEP
3072:q7nbMQH9OJWzopDOoMCY5E1S1DrVWh5HVDRGLuYOmICkZ92XQtWJu8l629DN:q8QHLEINrVWDGDICA9Ufl6UN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5182df2a9fdd29742a55919f7560e5a_JaffaCakes118
Files
-
f5182df2a9fdd29742a55919f7560e5a_JaffaCakes118.exe windows:5 windows x86 arch:x86
91c9de342109f82e6276d42466a7d3f0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
FindWindowExA
FlashWindow
MoveWindow
OpenIcon
CreateMenu
kernel32
Sleep
CreateFileMappingW
GetProcAddress
VirtualQuery
lstrlenW
FileTimeToSystemTime
GetFileType
DeleteAtom
GetStartupInfoW
HeapFree
GetPriorityClass
WriteFile
LoadLibraryExW
Exports
Exports
?OpenWindowStationOpenWindowSta
Sections
.text Size: 138KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yutyrt Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hjgjgf Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hgffds Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uytytr Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cxcx Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ