G:\Wdcvx\dihm\LpkXdFW\Knncay\ZbnhThm.pdb
Static task
static1
Behavioral task
behavioral1
Sample
02b71fbab71ea6c17611e39077cd012a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
02b71fbab71ea6c17611e39077cd012a_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
02b71fbab71ea6c17611e39077cd012a_JaffaCakes118
-
Size
137KB
-
MD5
02b71fbab71ea6c17611e39077cd012a
-
SHA1
b8147e632511bce965ef1f9dd83ccfc3b938a62d
-
SHA256
cf536fbc9f3061b7877db91c337014c1fe4af1c83956d5d4a0bfb3d3b284d086
-
SHA512
bdce5fbfa3cbd084a47c098f71041ca84ea86510ccb99c3f7cb239841247b4102c8d878f7d5e7a3b1b8955f39f3f2e592b2dcf2f0c7001a797d2b8891e59325e
-
SSDEEP
3072:XFPKBO3nSAHo1raUIhq7qsIyHrAuRgfKpZlUoCI1iBG9Y:XF8OXnHuraVq7qsIyHrZRgf0HUu8IG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02b71fbab71ea6c17611e39077cd012a_JaffaCakes118
Files
-
02b71fbab71ea6c17611e39077cd012a_JaffaCakes118.exe windows:5 windows x86 arch:x86
b7c35a147905eb55c8509113b1944ca1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
SetParent
GetDesktopWindow
CheckRadioButton
IsCharAlphaNumericW
FindWindowExW
DialogBoxIndirectParamW
GetMenuCheckMarkDimensions
GetWindowTextW
DestroyWindow
CopyRect
DialogBoxParamW
GetClipCursor
GetParent
MapVirtualKeyW
gdi32
SetTextAlign
StartDocW
EnumFontFamiliesExW
GetBkMode
GetTextMetricsA
GetDeviceCaps
BeginPath
EnumFontsW
AddFontResourceW
PolyBezier
CreateHalftonePalette
kernel32
SetCommMask
CallNamedPipeW
ReadFile
lstrlenW
GetDateFormatW
IsValidLocale
CancelIo
DeleteFileW
LoadLibraryA
RemoveDirectoryW
RaiseException
lstrcmpW
ntdll
_aullrem
Exports
Exports
?gcpauhmi@@YGPAKN@Z
?QDkaLooSNxUeYcDfnWb@@YGPAFPAI@Z
?okCsfsKxpufdscKULQ@@YGDD@Z
?dUiIXssbQcmzlmyQRfwem@@YGPANEPAG@Z
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 279KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ