Y:\aFwhkm\jzqm\FwhN\kLnygtY.pdb
Static task
static1
Behavioral task
behavioral1
Sample
03ca9f10578b4b613fed1e5535dcaef3_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
03ca9f10578b4b613fed1e5535dcaef3_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
03ca9f10578b4b613fed1e5535dcaef3_JaffaCakes118
-
Size
185KB
-
MD5
03ca9f10578b4b613fed1e5535dcaef3
-
SHA1
7bb6eec8572cf461bdea11cf6ef449702d1468e6
-
SHA256
e04561b3b0f9ec3eb3896eafccffbbea568750cbd96ed567731961473583b239
-
SHA512
77041d2578ff8fc10fcaf203698441222bac0a88aa442e3e84932ebc205864e4e4c68b03d04ee6e9fb597f617062c9a1c1ec82e35cbe41c0cf98eb901d014399
-
SSDEEP
3072:TCJDZfHfQq6K8ey+frchhwxbNXWNlP+3MqdmqGoS6WG45kESNY/ddbyw:TCRZoQLcSh4lVqdmqGoDWV4YlVyw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03ca9f10578b4b613fed1e5535dcaef3_JaffaCakes118
Files
-
03ca9f10578b4b613fed1e5535dcaef3_JaffaCakes118.exe windows:5 windows x86 arch:x86
cf32a153d8891661441f86ea4114548d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
SetScrollPos
RegisterHotKey
DeleteMenu
DrawIconEx
GetWindowDC
GetScrollPos
AppendMenuW
GetMessagePos
GetWindowLongA
GetWindow
SetFocus
SetPropW
comctl32
ImageList_Write
CreateStatusWindowW
kernel32
GetComputerNameExW
ReleaseSemaphore
CreateEventA
GetFileType
lstrcmpiW
GlobalFree
SetCurrentDirectoryA
LocalFree
GetProcAddress
LoadLibraryW
GetWindowsDirectoryW
GetModuleHandleA
gdi32
ScaleViewportExtEx
SetROP2
GetTextExtentExPointW
SetRectRgn
LPtoDP
EnumFontFamiliesExW
MoveToEx
Exports
Exports
?aZxlxiSWBiuowsxkurym@@YGIHPAG@Z
?hmhSRtqzsYEFavmaWnxYw@@YGXPAMPAJ@Z
?pefivadTEh@@YGHDF@Z
?xghRaxkGKkxI@@YGMDJ@Z
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 1024B - Virtual size: 722B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 141KB - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ