?InfoDelete@@YGXUverifyEw@CA7
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_7abb6094b7ca0c7b277afc87f2be2a64.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_7abb6094b7ca0c7b277afc87f2be2a64.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_7abb6094b7ca0c7b277afc87f2be2a64
-
Size
94KB
-
MD5
7abb6094b7ca0c7b277afc87f2be2a64
-
SHA1
a9790198b6076aed1bc9672543d6568cfd8604db
-
SHA256
5c8ce870dfefe1ccf57bf9a366df4021a9f1de37f70c88c16917fc04f2785ddf
-
SHA512
ac6ce120cb802abead875dba9b1e1f1ee635a12f88f4020a259f2af23ddd0f62c7033850fec4fad2de34d22fa0350eb3f8d1232b48f5ab7d07e8bd4610c9124c
-
SSDEEP
1536:weu7bf+VuA6C1QC5s2DnT9HuU8tolo5KEukkgNvMNRPe2P02Rh21417FvZ4fUGAL:wZmu1C5rbT9HN8alo4CjNvMTPeLQh21n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_7abb6094b7ca0c7b277afc87f2be2a64
Files
-
JaffaCakes118_7abb6094b7ca0c7b277afc87f2be2a64.exe windows:8 windows x86 arch:x86
d22aabf5da5e5427c457468e455d83a6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
RemoveFontResourceA
SetLayout
SetStretchBltMode
CreateRoundRectRgn
CreateSolidBrush
GetStockObject
UnrealizeObject
CreateFontIndirectW
kernel32
GetCurrentDirectoryW
user32
GetDesktopWindow
GetIconInfo
IsCharAlphaNumericW
RegisterWindowMessageA
VkKeyScanA
GetFocus
shlwapi
PathIsSameRootW
StrRChrIW
PathGetArgsA
PathIsPrefixA
StrChrW
UrlGetPartA
StrToIntA
StrPBrkW
Exports
Exports
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.maro5 Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.maro2 Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.maro3 Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.maro1 Size: 1024B - Virtual size: 539B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.maro6 Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.maro4 Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ