C:\Terminal\Cycle\Port\This.exe
Static task
static1
Behavioral task
behavioral1
Sample
be3c179f97c8409ccfb3e932cf95092d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
be3c179f97c8409ccfb3e932cf95092d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
be3c179f97c8409ccfb3e932cf95092d_JaffaCakes118
-
Size
181KB
-
MD5
be3c179f97c8409ccfb3e932cf95092d
-
SHA1
1c9343f7fdb2c3332cb060d1cbeb8a927611315b
-
SHA256
60401aa45839a9aba33de1161e8cdba74ac8e8b90f721151b534c45cdc044461
-
SHA512
6f267dac16666f02a21ba98255cf825cae2bfdb77b60aa580aca26e5ad5d8ed74662e702d8d27afe82389372c92f34d4f67fb0fa82deac7deef8102a17ca70be
-
SSDEEP
3072:zcFbqzk5h9NAY/WMKjmYa33PsrNjf4N5kjJGL52DmnFMz3pP95CYwFnjED:IFbqzk4Meml3PsrNENGvCyzx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource be3c179f97c8409ccfb3e932cf95092d_JaffaCakes118
Files
-
be3c179f97c8409ccfb3e932cf95092d_JaffaCakes118.exe windows:5 windows x86 arch:x86
d7343b1de756867a5bc0944fc2a0d5df
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
DeleteFileW
GetLocaleInfoW
HeapLock
VerifyVersionInfoW
GetThreadPriority
ResumeThread
HeapFree
TryEnterCriticalSection
user32
GetForegroundWindow
TranslateMessage
SetCaretPos
GetUpdateRect
CheckMenuItem
DlgDirListA
EqualRect
InsertMenuItemW
ClipCursor
MessageBoxA
DrawStateA
KillTimer
OpenIcon
FindWindowExA
GetClassInfoW
IsRectEmpty
IsWindowUnicode
CharLowerW
GetMessageTime
SystemParametersInfoA
ModifyMenuW
gdi32
GetTextFaceW
SetBitmapBits
GetTextExtentPointW
SetDIBColorTable
CreateBitmapIndirect
CreateDIBPatternBrushPt
MoveToEx
StartDocW
SetPixel
atl
AtlGetVersion
AtlSetErrorInfo
ole32
CoSetState
GetErrorInfo
shlwapi
PathFindExtensionW
Exports
Exports
_CallWindowProcACallWindowProcA@0
Sections
.fvgcf Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.dfert Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.r5trtr Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.weew Size: 512B - Virtual size: 472B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ