Static task
static1
Behavioral task
behavioral1
Sample
glenwood_laboratories_ltd.scr
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
glenwood_laboratories_ltd.scr
Resource
win10v2004-20240802-en
General
-
Target
17a5a4e224fa7abd74ddf326a0b40eb0_JaffaCakes118
-
Size
19KB
-
MD5
17a5a4e224fa7abd74ddf326a0b40eb0
-
SHA1
6f35e4e378df96ef0ae9674a21ea8dd792136fc4
-
SHA256
8db10b57f6579dc768cf504c6aec07c392c7b05d67539f7968d50bce4b37b888
-
SHA512
f3524652f6968265d0be1bd9c5d231cb86aa1b63256bca2caae6a61c12419c075d04ab3dc726b95f83981e603fefec3157c7a0128182c24d59c8d96bc6dfd369
-
SSDEEP
384:y0ebPl+ErG21BRHlAF1ppKLplwY7PgAp18kOlG649yx8oqhDYif+kPYpu:YbPl+ErG21LlAF4OGPRDsl+jNWkUu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/glenwood_laboratories_ltd.scr
Files
-
17a5a4e224fa7abd74ddf326a0b40eb0_JaffaCakes118.cab
-
glenwood_laboratories_ltd.scr.exe windows:4 windows x86 arch:x86
f002d20ad28f4c4db5d81d9d601d8a8a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
dbnmpntw
ConnectionRead
ConnectionWrite
ConnectionVer
kernel32
TlsGetValue
GetDateFormatW
SetCurrentDirectoryA
ExpandEnvironmentStringsA
WriteProcessMemory
HeapCreate
SystemTimeToFileTime
GetDiskFreeSpaceA
CreateNamedPipeW
SleepEx
GetTimeFormatA
GetNumberFormatA
GetProcessHeap
GetFullPathNameA
LoadLibraryA
GetAtomNameA
CompareStringA
GetPrivateProfileIntA
InterlockedExchange
CreateDirectoryA
shlwapi
PathCompactPathA
PathCombineA
UrlIsOpaqueA
UrlGetPartA
UrlHashA
UrlGetLocationA
UrlCombineA
PathCommonPrefixA
UrlIsA
UrlCanonicalizeA
themeui
DllCanUnloadNow
DllGetClassObject
DllInstall
DllCanUnloadNow
DllGetClassObject
user32
GetMessageA
IsZoomed
LoadImageW
CharToOemA
PeekMessageA
DispatchMessageA
SetFocus
wsprintfA
IsWindow
GetCaretPos
GetWindowLongA
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ