J:\WsKl\FlSzdo\GIrfp\vuaYeq\kewhmI.pdb
Static task
static1
Behavioral task
behavioral1
Sample
eda0f947deff1384caf10787cd2be6e9_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
eda0f947deff1384caf10787cd2be6e9_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
eda0f947deff1384caf10787cd2be6e9_JaffaCakes118
-
Size
93KB
-
MD5
eda0f947deff1384caf10787cd2be6e9
-
SHA1
0098868f1878ff148e49fa29ef9a1e7fd7f01ad4
-
SHA256
3b6e8fbfd958fa64961d0f0a25557ea876904b84370d6e14d64a4cfb128f0232
-
SHA512
f3131ffda75028c56cd86bacb0d121a05f4510bf2691066101760c56d3175992cbcb1f2f22dedb34639494e487003888ff46bc70292b62179214e55144c87a2c
-
SSDEEP
1536:1uUd40hv6cimIHlAqaDLymULOlEAJteJZnbJBzQusa2IQFoVRLy:1xd3afFIymUiuAXgnMvoDW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eda0f947deff1384caf10787cd2be6e9_JaffaCakes118
Files
-
eda0f947deff1384caf10787cd2be6e9_JaffaCakes118.exe windows:5 windows x86 arch:x86
32a8afffff8015bc9d408a3d8b11ccb3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
ImageList_Write
CreatePropertySheetPageA
kernel32
GlobalReAlloc
GetSystemDirectoryW
SetThreadLocale
UnhandledExceptionFilter
GetCommandLineA
CloseHandle
HeapSize
IsValidCodePage
VirtualFree
GetSystemTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
CreateThread
ntdll
memset
shlwapi
StrCmpW
user32
GetDlgCtrlID
GetMenu
TrackPopupMenu
ChildWindowFromPointEx
IsWindowEnabled
FindWindowA
SendNotifyMessageW
EnableWindow
GetWindowRect
GetKeyState
IsCharUpperA
MapDialogRect
gdi32
WidenPath
CreateDiscardableBitmap
GetDIBColorTable
CreateBrushIndirect
SetTextAlign
TextOutA
GetCharWidth32W
comdlg32
GetOpenFileNameA
GetFileTitleW
PageSetupDlgW
Exports
Exports
?VqxGzkUejznfvg@@YGGF@Z
?BqtwMwhxnaqEipxp@@YGJPAM@Z
?CfwtVoL@@YGPAHJ@Z
?Dqdqnqpcjmdijurdlnhc@@YGMM_N@Z
?MsffkqLdakNthzbib@@YGPADK@Z
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 788B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ