C:\Seek\Lost\Found\Include.exe
Static task
static1
Behavioral task
behavioral1
Sample
069fbcd03a78f39fc7dedd002a00eca3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
069fbcd03a78f39fc7dedd002a00eca3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
069fbcd03a78f39fc7dedd002a00eca3_JaffaCakes118
-
Size
213KB
-
MD5
069fbcd03a78f39fc7dedd002a00eca3
-
SHA1
6886e537554d10d2d51401b54904b1eb03bdda90
-
SHA256
e3fac2b6a78b481e47424f2b47b8ab705a96cd0f3208865a432a540731de9e85
-
SHA512
6bc8e789a38e352821511a7f7365fc3d6e5cd046207843aa181017ecffe3fed845f2e4da92958ba362916aa4f8ce347f95356d662fe6ee49841375b5533e58b9
-
SSDEEP
6144:MWsl6EXMTuxhjk7FR3MTYHY3rQzi2BItbK/o6:MN6EX0sjk7Yl3kmrkJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 069fbcd03a78f39fc7dedd002a00eca3_JaffaCakes118
Files
-
069fbcd03a78f39fc7dedd002a00eca3_JaffaCakes118.exe windows:5 windows x86 arch:x86
e4198b5695ad1e80761815cca72497f7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ole32
CoInitialize
user32
SetWindowLongA
SetTimer
DefMDIChildProcA
ScrollWindowEx
IsCharAlphaNumericW
SetFocus
MapVirtualKeyW
DrawIcon
GetActiveWindow
MessageBoxExW
DialogBoxIndirectParamW
LoadBitmapA
CharUpperBuffA
kernel32
TerminateThread
AreFileApisANSI
GetBinaryTypeA
OpenEventA
GlobalFlags
gdi32
CreatePen
IntersectClipRect
GetTextExtentPointW
CreatePenIndirect
GetCharWidth32W
CreatePolyPolygonRgn
CreatePatternBrush
advapi32
OpenBackupEventLogA
Exports
Exports
_IsMenuIsMenuIsMenuIsMenuIsMenuIsMenuIsMenuIsMenuIsMenuIsMenuIsMenu@0VVLfXfFFMPwWAHgTUxuAVHJGer4eertgfdgfdhgdfhgdfhjgdfgfdsdfgfd
Sections
.dbgdir Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 170KB - Virtual size: 170KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vptr1 Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fggdf Size: 1024B - Virtual size: 790B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wewew Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vbvbg Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ewerw Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ