Y:\EbWfvl\gmiM\VwALi\qrzidmmG\RCrxo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f9537209d526d8b5257117d8059572b3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f9537209d526d8b5257117d8059572b3_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f9537209d526d8b5257117d8059572b3_JaffaCakes118
-
Size
187KB
-
MD5
f9537209d526d8b5257117d8059572b3
-
SHA1
e7c9b72921966264f75b086cf3768a492b7ee227
-
SHA256
37276ed576c5e7d9feb51e84e5b706b6f9fc308c46b8633d90360ef4fd129168
-
SHA512
eaaaf17a051591f38e9ca7ce7b062abb6e982a3e3e8d0e4427c497dee534ad8da14af27cf37eed105967eaa61c9b04eb97e3018096f306930983a12eaf2949b1
-
SSDEEP
3072:WpwYydDYkygw6yDrGXuyZFKLJIl3lJq9GyEjoqim4sysYI5LgyQtEISD8:qdyJo5rGEVIl3uUVPNHyK5L4tEIE8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9537209d526d8b5257117d8059572b3_JaffaCakes118
Files
-
f9537209d526d8b5257117d8059572b3_JaffaCakes118.exe windows:5 windows x86 arch:x86
b2a03773e5bfb0f40a438cb26bc36751
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
CharUpperW
GetScrollPos
CreateDialogParamA
GetWindow
DrawIconEx
ChildWindowFromPoint
CreateIconFromResource
DefDlgProcW
InternalGetWindowText
DispatchMessageA
TrackPopupMenu
LoadIconW
DestroyIcon
gdi32
SetTextAlign
SetRectRgn
GetTextExtentPoint32A
PatBlt
ResizePalette
SetLayout
GetTextAlign
comctl32
CreateToolbarEx
CreatePropertySheetPageA
DestroyPropertySheetPage
ntdll
_aullrem
kernel32
GetComputerNameA
GetPriorityClass
CompareStringA
EnumResourceNamesA
QueryPerformanceCounter
IsDBCSLeadByteEx
lstrlenW
GetCommState
GetModuleHandleW
GetProcAddress
lstrcmpiW
GetCommModemStatus
Exports
Exports
?BCqtoBIB@@YGHKPAM@Z
?XFEKuoEBmaIqlrdvm@@YGFPANPAM@Z
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 130B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 142KB - Virtual size: 210KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ