2gerGW@4herhw*9283y4huWO.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5c28338e70876ee5fbd5a58de4708015_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
5c28338e70876ee5fbd5a58de4708015_JaffaCakes118
-
Size
353KB
-
MD5
5c28338e70876ee5fbd5a58de4708015
-
SHA1
83d78468bfd2c0990c5290fdd61fc93cf76a9773
-
SHA256
e34e9e47076e85ed927db634fcc99216387cb2dd13a7f087ae4a733d2f7add43
-
SHA512
9d44d73ecd0a0662ff636601996137d07a59accdb9ddb672f0bfd7464dc78cae6f14d202b4b8bd239fe93adb725078498d5c42e1a2081e9b80889b4279a0d1d9
-
SSDEEP
3072:Oe2mnzu9plMHn7Sa/CrMX8CPWwchhWRlG2wrnFbWrLkVbF+Por3CDI30:Ik22gnFCrYVbFR3CD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c28338e70876ee5fbd5a58de4708015_JaffaCakes118
Files
-
5c28338e70876ee5fbd5a58de4708015_JaffaCakes118.exe windows:5 windows x86 arch:x86
56cfd1dd93c873f14cb5c10fed23eca2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM
PDB Paths
Imports
user32
DefMDIChildProcW
GetClientRect
UnhookWinEvent
LookupIconIdFromDirectory
comdlg32
FindTextW
gdi32
ModifyWorldTransform
kernel32
GetModuleHandleW
IsSystemResumeAutomatic
TerminateJobObject
WriteProfileSectionA
msvcrt
memset
shlwapi
AssocIsDangerous
powrprof
PowerReplaceDefaultPowerSchemes
advapi32
LookupPrivilegeNameA
InitializeSecurityDescriptor
QuerySecurityAccessMask
GetSecurityDescriptorSacl
winscard
SCardBeginTransaction
Sections
.text Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.CRT1 Size: 283KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 940B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
P79 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ