?WorkInit@@YGXUverifyEw@CA7
Static task
static1
Behavioral task
behavioral1
Sample
02794ea4c8fff9036ae051f8aef6cc10_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
02794ea4c8fff9036ae051f8aef6cc10_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
02794ea4c8fff9036ae051f8aef6cc10_JaffaCakes118
-
Size
202KB
-
MD5
02794ea4c8fff9036ae051f8aef6cc10
-
SHA1
c80b93feeefd9a20a2db34567fe8f32e7a921df8
-
SHA256
7d8d36f0f96e0c49a1a116e7be3a02f09721b629d5169d400085d3ab56486aa5
-
SHA512
9b9ccbc6d27045c77d9e9c1ef8cceccc74fd521f765dcdaf3c73a15120621384f9dd58a761ce1a74d41e32f06f8b9e9e3292f0f6de837e0307056ebd2bc80b97
-
SSDEEP
6144:3LEAGx3/rX0PBhxGu3J4QFR9KqA/JUi98nuzLeljyn7x:383/rXsn3JLbAR1wYwy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02794ea4c8fff9036ae051f8aef6cc10_JaffaCakes118
Files
-
02794ea4c8fff9036ae051f8aef6cc10_JaffaCakes118.exe .ps1 windows:8 windows x86 arch:x86 polyglot
b05e305db721f9ae1a8befabfab85d87
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
UrlGetPartA
PathIsFileSpecW
StrCSpnA
StrToInt64ExW
UrlIsW
ord156
UrlIsOpaqueA
user32
GetKeyState
UnionRect
kernel32
lstrcpyA
Exports
Exports
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ptr Size: 1024B - Virtual size: 684B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ecmp Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.warz Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ptv Size: 512B - Virtual size: 41B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.warp Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.icmp Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wars Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ