U:\FirmWork\Studio\Common\Bin.exe
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_93131ff24484d8d307deef0536a93d0e.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_93131ff24484d8d307deef0536a93d0e.exe
Resource
win10v2004-20250314-en
General
-
Target
JaffaCakes118_93131ff24484d8d307deef0536a93d0e
-
Size
81KB
-
MD5
93131ff24484d8d307deef0536a93d0e
-
SHA1
3160cd9c452958549303fc1e87f129be237371e7
-
SHA256
4ac35d2952f37ca2efc8f804b12059c4a86b4c64ae364b931d7202ce1f5d6c2b
-
SHA512
94d661d686b719369b5370c8479ab18ecfe1704798c52a1b4d8a347573baf5174160d509e6f30b2fbc136c5fa728252a4ce93047c617c35904c06eabd42de25a
-
SSDEEP
1536:yyYiaMURqLZRBm7NBgzG5MyH9J1NR1Oyzg4mKcKqToBgZo2gIuvT93D+yKZy:naQlq7n0whYcHEvIApuvhyyK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_93131ff24484d8d307deef0536a93d0e
Files
-
JaffaCakes118_93131ff24484d8d307deef0536a93d0e.exe windows:5 windows x86 arch:x86
3907e4d09b904035691834bac34f7eea
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
GetKerningPairsA
user32
VkKeyScanA
IsCharUpperW
kernel32
GetProcessHeap
Exports
Exports
?FancyBack@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?OptimusIO@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?OptionWindowGear@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?RegardSeven@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?RightApocoloptus@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?SecureCheck@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?SignSetupUp@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?SmeltIron@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?StrongFontW@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?TaleRevert@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
Sections
.text Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dat2 Size: 1024B - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.data3 Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dat1 Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ