R:\gpUUcUpihJj\tVhtFYAPM\bpHbphqzxxuzvz.pdb
Static task
static1
Behavioral task
behavioral1
Sample
075abaf1cfb10206f4ad8d93a8f2e2fe_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
075abaf1cfb10206f4ad8d93a8f2e2fe_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
075abaf1cfb10206f4ad8d93a8f2e2fe_JaffaCakes118
-
Size
165KB
-
MD5
075abaf1cfb10206f4ad8d93a8f2e2fe
-
SHA1
26de44d9ceaa191222891344f164cacfb8c5df9f
-
SHA256
cace366dfd128bd51f79286f76baf4d7fb8302075916960d927d4de1b04f6428
-
SHA512
34386a9aef6a188f1e6b272dc63e2fadeeb0a89922993446db661f02f41d2e622197c1d7b1beb670ed929ec7913b75f7989599c725b05d8d94f4986e6cfb4330
-
SSDEEP
3072:IEaEEQUBBDL7atKrkpaNfL9vNvav/FyqRKUtfEEPNnywrtYXOtCYO0SmGNjcuS:LoBH7awrkcfLFNS3FzKUV3/xgCq0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 075abaf1cfb10206f4ad8d93a8f2e2fe_JaffaCakes118
Files
-
075abaf1cfb10206f4ad8d93a8f2e2fe_JaffaCakes118.exe windows:5 windows x86 arch:x86
dc2f904e64bedc3b055b56af52e3c955
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
IsWindowEnabled
GetClientRect
GetForegroundWindow
SetFocus
OffsetRect
AdjustWindowRect
IsWindow
GetTopWindow
kernel32
GetCompressedFileSizeW
GetFileType
HeapReAlloc
GetVersionExA
GetSystemWindowsDirectoryW
GetShortPathNameW
ReleaseSemaphore
MoveFileA
GetSystemDirectoryW
UnmapViewOfFile
DisconnectNamedPipe
GetCurrentThreadId
CompareFileTime
SetTimerQueueTimer
ntdll
RtlCompareMemory
Exports
Exports
?InsertFil
Sections
.text Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fxc Size: - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fx Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ