G:\ijtcpd\owxu\hXwyij.pdb
Static task
static1
Behavioral task
behavioral1
Sample
03449ea0faf62e4d03adf537659d102c_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
03449ea0faf62e4d03adf537659d102c_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
03449ea0faf62e4d03adf537659d102c_JaffaCakes118
-
Size
60KB
-
MD5
03449ea0faf62e4d03adf537659d102c
-
SHA1
cfb868d787146ec27dc884a87d437622993d9cf2
-
SHA256
5492e23f8edc63af68c5500690cd02cfdcdb8e8f1b60ab80c607089e04d7c767
-
SHA512
662cdcb82a8d274d2ec7c20a543ddff5dac7cf6c88b9d8ba19e3d7f3d97d18e780fb87af71bdfeb398a65106bf1410fc017ee654d9c77bc3a70bfa1cfa4d9e33
-
SSDEEP
1536:PQ1XqNLqEQRIs0KGjCsBc3Kyb0NXjLWdEEb:26API4GNcahRun
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03449ea0faf62e4d03adf537659d102c_JaffaCakes118
Files
-
03449ea0faf62e4d03adf537659d102c_JaffaCakes118.exe windows:5 windows x86 arch:x86
2f7a6ab5f8603f78c78d2eac5518c444
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
ImageList_Write
ImageList_SetIconSize
ImageList_Read
CreateStatusWindowW
user32
EndDialog
ChildWindowFromPointEx
TrackPopupMenuEx
TranslateMessage
InSendMessage
CharToOemBuffA
OemToCharA
GetActiveWindow
SendDlgItemMessageA
RegisterTasklist
KillTimer
DestroyMenu
SendNotifyMessageW
kernel32
VirtualProtect
DeleteCriticalSection
GlobalMemoryStatus
CompareFileTime
lstrcmpA
CreateWaitableTimerW
LocalSize
SetThreadAffinityMask
FlushFileBuffers
GetStartupInfoA
GetPriorityClass
RemoveDirectoryW
gdi32
SetDCPenColor
AddFontResourceW
SetPaletteEntries
EndPage
EnumFontsW
TextOutA
SetAbortProc
SetMapMode
Escape
Exports
Exports
?ZyUyoqQgdoqds@@YGGPANPAM@Z
?_PmkpzfshhynvkerddjCpp@@YGGDG@Z
?DpoigZOfrvvtHbkgtmrrIa@@YGPAEEPAE@Z
?Wzptbdlvcwaex@@YGPAFM@Z
?ResnuzxJklyZysv@@YGJH@Z
?GpMkrptnascnoj@@YGXGM@Z
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ