534623***)(.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f54a9db119590767f3794aaa5535892f_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f54a9db119590767f3794aaa5535892f_JaffaCakes118
-
Size
200KB
-
MD5
f54a9db119590767f3794aaa5535892f
-
SHA1
a9d9002a57044a83d6f580d22194845fc92a00c9
-
SHA256
c89f1e55b418a4447394994498971c6e6f3848bfe39ef9ba6fb255791358b00c
-
SHA512
d7b84b60e6370ae1b5c6f8b379da9c49d6a3ba125b98583fe1f2b19f7cf363af94a7a0c049ddcdde69d3ed1ffe747800e70b41b7230e842c55029ef342c23a15
-
SSDEEP
768:FH5frvbEOM9VGVVXzLbRu/7069GtaPejb2W7ifJ+WZ3dmechOQE0M+E2luUyy1mE:h5X+9VGfpa70QuifFZwTMOubYh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f54a9db119590767f3794aaa5535892f_JaffaCakes118
Files
-
f54a9db119590767f3794aaa5535892f_JaffaCakes118.exe windows:4 windows x86 arch:x86
2077b7c05f8c89dd446b98e06e4595ed
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comdlg32
GetFileTitleA
msi
ord114
ole32
PropVariantClear
OleLoadFromStream
user32
EmptyClipboard
GetMenuStringW
kernel32
FreeConsole
GetThreadLocale
GetComputerNameA
SetEnvironmentVariableW
RemoveDirectoryW
GetProcessHeap
GetFileInformationByHandle
InterlockedExchange
HeapAlloc
CreateEventW
SetFileApisToANSI
SetFileApisToOEM
GetCommandLineA
FindAtomW
CreateFileMappingW
imm32
ImmDestroyContext
ws2_32
inet_addr
esent
JetBeginExternalBackup
urlmon
SetSoftwareUpdateAdvertisementState
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.code Size: 109KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
32^^text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_ Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.werheer Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 892B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ