E:\terK\skyYneTebQxo4\xdrrweE\TygTKte.uxb
Static task
static1
Behavioral task
behavioral1
Sample
01086f9b43ea33be6451382f254a1c3e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
01086f9b43ea33be6451382f254a1c3e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
01086f9b43ea33be6451382f254a1c3e_JaffaCakes118
-
Size
85KB
-
MD5
01086f9b43ea33be6451382f254a1c3e
-
SHA1
8275c1f21cf9e7048005099733747c523c8f1799
-
SHA256
b3170563998ccdf5dd6ea83073164eda51c20f761d019150210de957e399103c
-
SHA512
4e2f924ca8dcbd50b71cfd060073ed1f6a51efd70d1b89e8fa747808f7de2c0e2dc5b0b3cbe31dcd392cc119b90b5465ce21e7bf8d3c58dff49526389bd9d1de
-
SSDEEP
1536:bpKjY84KgVH/fA6Vlh9rlmtiA3Sms8ROC5hoqUGyo46lJEZ19Ro2nei2v2xTD7E:UFifxLh9xmtV37s8kC7of6b2192EyONM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01086f9b43ea33be6451382f254a1c3e_JaffaCakes118
Files
-
01086f9b43ea33be6451382f254a1c3e_JaffaCakes118.exe windows:5 windows x86 arch:x86
3b98eb63e7901b0394fcc4f6735973cd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
PathParseIconLocationA
StrStrW
PathCompactPathExW
ord158
PathFindNextComponentW
ChrCmpIW
kernel32
LoadLibraryExW
GetSystemTimeAdjustment
SetFileApisToOEM
SetProcessShutdownParameters
GlobalFix
SetupComm
lstrlenA
lstrcmpiA
LoadLibraryW
GetTapePosition
SetMessageWaitingIndicator
CreateJobSet
lstrcpyA
OpenSemaphoreA
CancelWaitableTimer
GetModuleHandleExA
SetMailslotInfo
GetCommState
user32
CharUpperA
GetClipCursor
CopyImage
GetSubMenu
DrawTextW
GetWindowRect
GetClientRect
GetForegroundWindow
GetMenu
SetLastErrorEx
GetAltTabInfoA
RedrawWindow
MapWindowPoints
AdjustWindowRect
GetDialogBaseUnits
GetClipboardOwner
CreateCursor
ModifyMenuA
gdi32
PlayEnhMetaFileRecord
SetArcDirection
SetBkColor
GetEnhMetaFileBits
GetFontData
CreateRectRgn
GetTextCharsetInfo
GetRgnBox
CreateFontIndirectW
DeleteEnhMetaFile
SetViewportExtEx
Exports
Exports
?_DrawFocusRect@@YGKPAD0PAG@Z
?_FillRect@@YGKPAD0@Z
?_FrameRect@@YGPAXPAKPAEPAI@Z
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.itext Size: 1024B - Virtual size: 643B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RData Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CData Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 750B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ