?TestingServ@@YGXUverifyEw@CA7
Static task
static1
Behavioral task
behavioral1
Sample
decdce593250fc0cc97149083ec50280_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
decdce593250fc0cc97149083ec50280_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
decdce593250fc0cc97149083ec50280_JaffaCakes118
-
Size
99KB
-
MD5
decdce593250fc0cc97149083ec50280
-
SHA1
c2a5e3e386deb2a8ecad52d3de07eaa14eb218ab
-
SHA256
70c866ae194faadced14157cabf1360813db987e1a8a3017a03ce6f098b07250
-
SHA512
7eb26a6b76e55153e455d7ca160f7f8eb7a7eef9c10c1b2327cf87d7bf34289d19ed37cd8f69cf9981a2d882f979b0baa3e4294821d078ccfa57bc51ced17cef
-
SSDEEP
1536:KcekZS/BadXitUkV1TIInFbNRGVexJWSDrt3gBr99jv1cq1Gri7K:D0ySHV1TIIFZR0exJ/wBr9P1GrU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource decdce593250fc0cc97149083ec50280_JaffaCakes118
Files
-
decdce593250fc0cc97149083ec50280_JaffaCakes118.exe windows:11 windows x86 arch:x86
4657b19441307f17bab362a32a4805e0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsCharUpperA
IsCharAlphaNumericA
gdi32
CreateSolidBrush
shlwapi
UrlGetPartA
PathMakePrettyW
StrStrW
PathUndecorateW
StrSpnW
StrChrIW
PathGetDriveNumberA
kernel32
GetWindowsDirectoryA
Exports
Exports
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 394B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jeep Size: 512B - Virtual size: 156B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rase Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.cold Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.heso Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.snap Size: 512B - Virtual size: 487B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bost Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vort Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.defo Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE