C:\Hello\Insert\Data\File.exe
Static task
static1
Behavioral task
behavioral1
Sample
290d2d646d15e06ad552330e2b05b829_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
290d2d646d15e06ad552330e2b05b829_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
290d2d646d15e06ad552330e2b05b829_JaffaCakes118
-
Size
233KB
-
MD5
290d2d646d15e06ad552330e2b05b829
-
SHA1
6f0ae810d897510a443b774b2539ce5ad2cbbb5f
-
SHA256
eb08a7a7c4d290bbbc2c3de5859224d5a7e2c75cd75ac526bb7f57f60b801b01
-
SHA512
37e2494c49d33b75b905b78b88e8a7dd716d75d02c1eb14397d40d24b7737e2ad1158aa7d1c0837d4ce1f34fe6f40bf6705d1ee52a47b8fd3f39cd28948a8732
-
SSDEEP
3072:Is2VwD6peDw1BENFW+kkeLBa6O5nC8ITFHylzc10FXe3R75HKE+2DQzqTqkeeZNu:/kamMQjLjlsN60Fu3Mz2ZNTzhhU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 290d2d646d15e06ad552330e2b05b829_JaffaCakes118
Files
-
290d2d646d15e06ad552330e2b05b829_JaffaCakes118.exe windows:5 windows x86 arch:x86
33b5e23d6ad80093c31498faf7454b7f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetWindowsDirectoryW
MoveFileA
lstrlenA
LCMapStringW
FindNextFileW
OpenFile
MultiByteToWideChar
CreateFileMappingA
FindResourceA
WriteFile
LocalLock
IsValidLanguageGroup
FileTimeToSystemTime
EnumResourceLanguagesA
UnmapViewOfFile
WaitForMultipleObjects
LockFile
IsValidLocale
FlushViewOfFile
GetHandleInformation
GetCommProperties
FileTimeToDosDateTime
GetShortPathNameW
SetSystemTime
_lwrite
HeapUnlock
FindResourceW
CreateMailslotW
FormatMessageW
SetCommBreak
GetCommandLineA
GetVersionExA
SetHandleCount
VirtualProtect
GetCommModemStatus
CreateNamedPipeA
GetDateFormatW
GetFullPathNameA
ClearCommError
ReadFile
EnumResourceNamesA
FindNextChangeNotification
SizeofResource
CreatePipe
CompareStringA
psapi
QueryWorkingSet
shlwapi
PathUnmakeSystemFolderA
advapi32
RegQueryValueExA
RegQueryValueExW
RegReplaceKeyA
user32
IsCharAlphaNumericA
Exports
Exports
_IsWow64MessageIsWow64Message@0
Sections
.text Size: 213KB - Virtual size: 213KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ