?_Chord@@YGKKK@Z
Static task
static1
Behavioral task
behavioral1
Sample
5619cf521f58aa51ad48c0ca78d0e533_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
5619cf521f58aa51ad48c0ca78d0e533_JaffaCakes118
-
Size
132KB
-
MD5
5619cf521f58aa51ad48c0ca78d0e533
-
SHA1
08b4ff22b233f5ddb462fb4c3e9e90fc5725dca9
-
SHA256
7d80380d27f16b42b0e69042f262dd5d65022f2e0cc43fa6629774bec60d53a6
-
SHA512
922f6a7dd109b78c586c5189cc8c7f9a9d1a0149f5ff42abf150f0027d30be0e64c98ea6b70c4d8e56e80ca649639ac60d275045f64066f685f3fe6733900806
-
SSDEEP
3072:ttftuNu05IpBvegMC1qJZ/OMYfMys08lgSk4FTzYTd:1uApVrFAJJJYfMy38fLpEd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5619cf521f58aa51ad48c0ca78d0e533_JaffaCakes118
Files
-
5619cf521f58aa51ad48c0ca78d0e533_JaffaCakes118.exe windows:5 windows x86 arch:x86
d4b4e1b61263b500d40084cf7a38c5dc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLangID
GetBinaryTypeW
IsBadReadPtr
SleepEx
FormatMessageW
LoadLibraryExW
ReleaseMutex
FindNextFileW
GetFullPathNameW
GetLocaleInfoA
ResetEvent
gdi32
RectVisible
SetBitmapDimensionEx
SetStretchBltMode
CreatePolygonRgn
Polyline
GetDeviceCaps
user32
IsCharAlphaW
DeferWindowPos
GetMenuItemRect
IsIconic
ScrollWindowEx
ShowWindowAsync
CreateWindowExW
ArrangeIconicWindows
ShowCursor
SystemParametersInfoW
LoadStringW
SubtractRect
EndDialog
comctl32
PropertySheetW
ImageList_AddMasked
CreatePropertySheetPageW
ImageList_Remove
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
MDATA Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
MEM_DAT Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.raw0 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ITEXT Size: 2KB - Virtual size: 203KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
EXPORTS Size: 1024B - Virtual size: 591B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ