M:\wpxfknKu\capvuRv\DNjewywvOewhhw\ynsxcxyoWhxQyt\ubsaabqyfc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
eb627313aa215ddab657a16315b32fb2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eb627313aa215ddab657a16315b32fb2_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
eb627313aa215ddab657a16315b32fb2_JaffaCakes118
-
Size
161KB
-
MD5
eb627313aa215ddab657a16315b32fb2
-
SHA1
4bf1d3dacd96588b2b5ca45f6e242cf331b45ff3
-
SHA256
49f8b7fe1a437606bdae66c27ed425745034a525a00db6ca310efed296236cb9
-
SHA512
9a55f710c3bcba97ece2408867f28e067b2fdd5abaf5f22c4794ea60afec69d52ad6c3929b8823cfab619f3181cc939846fd277f3b26d31c7c13a9b3dfeff3c5
-
SSDEEP
3072:wi9F4A8iv5byxOb7zu/uE+NbtYO9GWjTnl6YbStm:w64AZ5e2u/uE+NbaO9GWjTl6k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb627313aa215ddab657a16315b32fb2_JaffaCakes118
Files
-
eb627313aa215ddab657a16315b32fb2_JaffaCakes118.exe windows:5 windows x86 arch:x86
1d2eb3167f5677ac574cab6cde64d666
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
ChildWindowFromPointEx
AllowSetForegroundWindow
GetWindow
DialogBoxIndirectParamW
GetDialogBaseUnits
SetWindowLongA
GetForegroundWindow
DrawFrameControl
FindWindowA
CheckMenuRadioItem
FindWindowW
AppendMenuA
PostMessageA
GetActiveWindow
GetMenuItemRect
GetTopWindow
CallWindowProcA
GetMenuState
kernel32
CreateSemaphoreA
LocalAlloc
lstrcmpiA
GetFileSize
DefineDosDeviceW
SetLastError
LoadLibraryA
EscapeCommFunction
Exports
Exports
?VirtualDataRes
Sections
.text Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfhgfh Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfhf Size: 512B - Virtual size: 109B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uiyytg Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bgv Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iuouyt Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ