?SordexInWave@(AZH_KK)C
Static task
static1
Behavioral task
behavioral1
Sample
0939e0ff7e661791cb1abaa20a4789bf_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
0939e0ff7e661791cb1abaa20a4789bf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0939e0ff7e661791cb1abaa20a4789bf_JaffaCakes118
-
Size
173KB
-
MD5
0939e0ff7e661791cb1abaa20a4789bf
-
SHA1
75e0dd66e7c523ae1c7fb722a7084db7442c8f67
-
SHA256
d362fb9c9673748aca92aa3d09a3000cf81bfabb84df796dd61b91a9b719a674
-
SHA512
ab280eacf9fa40a044d1e9bc1fb63f4b07b128c368d8358277fd2731f57480c0d6ee43bfc513dbe1ca3574c30b5a51c5e02d9a99a2b9b5c08d822cd9c6689618
-
SSDEEP
3072:ItGauJGgnQfbstsjOYFqPue4pvXx/2m9jtrkd9c14OSVx:LauTI8PL4pt2/FvV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0939e0ff7e661791cb1abaa20a4789bf_JaffaCakes118
Files
-
0939e0ff7e661791cb1abaa20a4789bf_JaffaCakes118.exe windows:5 windows x86 arch:x86
91c25838672f43f5402bbb3cafcc4ef7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathCompactPathExW
ord29
kernel32
GetModuleHandleW
lstrcmpiA
lstrcmpW
LoadLibraryW
Exports
Exports
Sections
.text Size: 25KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pulse Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ