O:\ylcK\aHzwyuqbvblr4\vhjxlzE\tsPjdXe.HGb
Static task
static1
Behavioral task
behavioral1
Sample
fc78827f22bde99588681c26f1633841_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fc78827f22bde99588681c26f1633841_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fc78827f22bde99588681c26f1633841_JaffaCakes118
-
Size
86KB
-
MD5
fc78827f22bde99588681c26f1633841
-
SHA1
010e9bd9ff1b9530a96d5d94d90ecaf969c18f5f
-
SHA256
a415da6f462b585275556b56ee4ebe6d848ef0fbe8c2475c9c553e644a242f51
-
SHA512
d9b877eb33cc96c09665173cc77d5131cdfcdf2007682102c79a293997445789b4f3ef73396efd78e6a81360f13c4ca8e59a882ccbdbd5909baed64ce74da616
-
SSDEEP
1536:MpKjYo4KgVHuefA6Vlh9rlrtiAQSms8ROC5hoqUGyo4HlJEZ19Ro2nei2v2xTDU1:fRiOexLh9xrtVQ7s8kC7ofHb2192EyOa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc78827f22bde99588681c26f1633841_JaffaCakes118
Files
-
fc78827f22bde99588681c26f1633841_JaffaCakes118.exe windows:5 windows x86 arch:x86
3b98eb63e7901b0394fcc4f6735973cd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
PathParseIconLocationA
StrStrW
PathCompactPathExW
ord158
PathFindNextComponentW
ChrCmpIW
kernel32
LoadLibraryExW
GetSystemTimeAdjustment
SetFileApisToOEM
SetProcessShutdownParameters
GlobalFix
SetupComm
lstrlenA
lstrcmpiA
LoadLibraryW
GetTapePosition
SetMessageWaitingIndicator
CreateJobSet
lstrcpyA
OpenSemaphoreA
CancelWaitableTimer
GetModuleHandleExA
SetMailslotInfo
GetCommState
user32
CharUpperA
GetClipCursor
CopyImage
GetSubMenu
DrawTextW
GetWindowRect
GetClientRect
GetForegroundWindow
GetMenu
SetLastErrorEx
GetAltTabInfoA
RedrawWindow
MapWindowPoints
AdjustWindowRect
GetDialogBaseUnits
GetClipboardOwner
CreateCursor
ModifyMenuA
gdi32
PlayEnhMetaFileRecord
SetArcDirection
SetBkColor
GetEnhMetaFileBits
GetFontData
CreateRectRgn
GetTextCharsetInfo
GetRgnBox
CreateFontIndirectW
DeleteEnhMetaFile
SetViewportExtEx
Exports
Exports
?_DrawFocusRect@@YGKPAD0PAG@Z
?_FillRect@@YGKPAD0@Z
?_FrameRect@@YGPAXPAKPAEPAI@Z
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.itext Size: 1024B - Virtual size: 643B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RData Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CData Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 750B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ