?TestingServ@@YGXUverifyEw@CA7
Static task
static1
Behavioral task
behavioral1
Sample
54135cf0c3490759a50b89a9f40c79d0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
54135cf0c3490759a50b89a9f40c79d0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
54135cf0c3490759a50b89a9f40c79d0_JaffaCakes118
-
Size
99KB
-
MD5
54135cf0c3490759a50b89a9f40c79d0
-
SHA1
5bd4fafcd70607ba17bea735262f18326ac6d978
-
SHA256
bea2be16e10396f1e9da62272aa71f4b5fa0dc31ae4ae96e708a3a96af5fe465
-
SHA512
d0b6230492599d63b7488d639b0a07a120b25870f4402c5dd10a5c2aac587916da809b11ab8ef1deac136e660e7f34cfdc39fd5e8ae1ea0f8a53d867ae712874
-
SSDEEP
1536:vcekZS/BadXitUkV1TIInFbNRGVexJWSDrt3gBr99jv1cq1Gri7K:k0ySHV1TIIFZR0exJ/wBr9P1GrU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54135cf0c3490759a50b89a9f40c79d0_JaffaCakes118
Files
-
54135cf0c3490759a50b89a9f40c79d0_JaffaCakes118.exe windows:11 windows x86 arch:x86
4657b19441307f17bab362a32a4805e0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsCharUpperA
IsCharAlphaNumericA
gdi32
CreateSolidBrush
shlwapi
UrlGetPartA
PathMakePrettyW
StrStrW
PathUndecorateW
StrSpnW
StrChrIW
PathGetDriveNumberA
kernel32
GetWindowsDirectoryA
Exports
Exports
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 394B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jeep Size: 512B - Virtual size: 156B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rase Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.cold Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.heso Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.snap Size: 512B - Virtual size: 487B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bost Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vort Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.defo Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE