F:\uRqCLm\IKunmIVr\csxjln.pdb
Static task
static1
Behavioral task
behavioral1
Sample
09c1a78c2bf0b3db49c90cfe41b5ca51_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
09c1a78c2bf0b3db49c90cfe41b5ca51_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
09c1a78c2bf0b3db49c90cfe41b5ca51_JaffaCakes118
-
Size
148KB
-
MD5
09c1a78c2bf0b3db49c90cfe41b5ca51
-
SHA1
9975651540d030d06e6263c31e928591c7c46db7
-
SHA256
c747716093343bc0baf77f70151f28c57610fee811f89941ce204424aa33a95a
-
SHA512
707b12afe83db3b20c72030d64cb388455188b1fc2eb9cded708c4eafa6e4bcc0b553d1e0a4b65e6ba1442670964803f5ebad866256d6edeb9595d41122055fc
-
SSDEEP
3072:Ux2dZS+FPr+2I3kC9a4dLO4cQBE5Q6CYbvVzPfzSA8d/y2:S2zXhc3kzoL+5Q6dbtfmAc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09c1a78c2bf0b3db49c90cfe41b5ca51_JaffaCakes118
Files
-
09c1a78c2bf0b3db49c90cfe41b5ca51_JaffaCakes118.exe windows:5 windows x86 arch:x86
93e2db4052c67239468636af6e842743
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
ExtFloodFill
SetBkMode
GetDeviceCaps
CreatePenIndirect
TextOutA
SetAbortProc
GetPixel
DPtoLP
GetTextExtentExPointW
shlwapi
StrCatBuffW
PathGetArgsW
user32
IsWindowUnicode
FindWindowW
RegisterHotKey
wsprintfW
AdjustWindowRect
GetMessageW
ReplyMessage
MapWindowPoints
GetUserObjectInformationW
SetScrollPos
TabbedTextOutW
EndMenu
GetScrollRange
kernel32
GetUserDefaultLCID
GetComputerNameW
lstrlenW
FoldStringW
GetDateFormatW
SetLastError
GetComputerNameExW
DefineDosDeviceW
RemoveDirectoryW
LCMapStringA
GlobalFlags
GetTempPathW
CompareStringA
Exports
Exports
?wpMWKlkbQ@@YGME@Z
?fvdqngxErFckkuJauisyPk@@YGPAII@Z
?bbesmfl@@YGPA_NPAG@Z
?xvwweIhcdYvileP@@YGPAXIN@Z
?sBjobzO@@YGPAGI@Z
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ