L:\gybS\volag\Hylg\wkWGCcs\jXohkv.pdb
Static task
static1
Behavioral task
behavioral1
Sample
05bdad90e0d17ed8f84f9bb5ff2fca0d_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
05bdad90e0d17ed8f84f9bb5ff2fca0d_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
05bdad90e0d17ed8f84f9bb5ff2fca0d_JaffaCakes118
-
Size
194KB
-
MD5
05bdad90e0d17ed8f84f9bb5ff2fca0d
-
SHA1
f9ec7d03d887f842e92e63185fc8012bf7dc8871
-
SHA256
1f75d0654505cda9bb4b32eef45e576ed3b3c2c3e47151e581c5a276d2ef8fdb
-
SHA512
78a5e6800ff79a9a27a4120011c432e7956b1cb662593bd1ddbad2e762dcd16f590f3233bc2ca6d083bfeff59e6eaae2d2ea6d6284091b5bd0078cb1d87585c3
-
SSDEEP
3072:t13PXbLEy4G7Zikkv0HLGI7xruxpdOkOAjIJcEJVr7x509TM:bMy4G7gxYLGmKLN276S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05bdad90e0d17ed8f84f9bb5ff2fca0d_JaffaCakes118
Files
-
05bdad90e0d17ed8f84f9bb5ff2fca0d_JaffaCakes118.exe windows:5 windows x86 arch:x86
51474a41902d19d3418f1af08100308c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
CreateCompatibleDC
FillRgn
GetClipBox
GetMapMode
GetPaletteEntries
RemoveFontResourceW
SetDIBitsToDevice
SetROP2
ExtTextOutA
user32
ValidateRect
InvalidateRgn
IsChild
GetForegroundWindow
ArrangeIconicWindows
MapVirtualKeyW
PostMessageA
SetWindowRgn
LoadBitmapW
InvalidateRect
EqualRect
LoadMenuA
kernel32
FindClose
GetSystemTimeAdjustment
GetThreadLocale
SetNamedPipeHandleState
TlsGetValue
GetDateFormatW
lstrlenW
GetUserDefaultLangID
GetTickCount
GetTempFileNameA
GetComputerNameA
lstrcatW
AddAtomA
comctl32
ImageList_Create
CreatePropertySheetPageA
shlwapi
PathRemoveArgsW
ChrCmpIA
Exports
Exports
?Ycrjwrr@@YGMPA_N@Z
?rAvozkdtYjfxgKcvKa@@YGMG@Z
?RxlekywtqzwnQqpdbf@@YGPAEPAK@Z
?IzjjldbRebwCP@@YGPAJPAH@Z
Sections
.itext Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ