aEbJD@12
Static task
static1
Behavioral task
behavioral1
Sample
0a192627ca744194f272767096f8cb05_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0a192627ca744194f272767096f8cb05_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0a192627ca744194f272767096f8cb05_JaffaCakes118
-
Size
155KB
-
MD5
0a192627ca744194f272767096f8cb05
-
SHA1
78b74e6428c10ce403d4a7418eb768ce13e79129
-
SHA256
d8e378a6aaee2623924c763b6b76c089630dda1f98b13ba6538deb76e6a63cbc
-
SHA512
d3d530e86e9f817d38ef01313b9fd7c3b41d880b313a7a35c87ba3a2411d81b5fde083df5aa705bc2d41d8ec3073edf17e8b2564b61b022321cc07e3b7a3ee77
-
SSDEEP
3072:yj6qL3G1y6Id8cfilPWSNB/0RSLvFVy9q83uTYnAiTCpdm:y2EB6IecYB/0RD9q8LnAiTe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a192627ca744194f272767096f8cb05_JaffaCakes118
Files
-
0a192627ca744194f272767096f8cb05_JaffaCakes118.exe windows:4 windows x86 arch:x86
1d61aa4eec863f27b8ae90a1007422ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetFocus
IsDlgButtonChecked
SetCursor
GetDC
GetMenu
SetForegroundWindow
LoadCursorA
SetClipboardData
shell32
DragQueryFileA
SHGetDesktopFolder
kernel32
SetThreadLocale
VirtualAlloc
MoveFileExA
CreateThread
GetModuleFileNameA
GetTempPathA
GetModuleHandleA
SetFilePointer
SetLastError
SetHandleCount
LocalFree
SetEndOfFile
IsBadHugeReadPtr
GetStartupInfoA
GetFullPathNameA
ExitProcess
VirtualAllocEx
GetDiskFreeSpaceA
EnumCalendarInfoA
IsBadReadPtr
GetFileType
LoadLibraryA
GetVersionExA
gdi32
CreateCompatibleDC
RestoreDC
SetPixel
GetTextColor
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ndata Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ