C:\zaaGp\uCoLcFN\grbZfuo\fmor.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0b828a3bf3fdf234549857f105f04664_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0b828a3bf3fdf234549857f105f04664_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0b828a3bf3fdf234549857f105f04664_JaffaCakes118
-
Size
112KB
-
MD5
0b828a3bf3fdf234549857f105f04664
-
SHA1
27ec7748bb23770641d33ac9f5859e5c60bcb0bd
-
SHA256
2ec57ca1f253f9599c46072e2dfad7cf643bed8e09a8d268e341bc6fa5756532
-
SHA512
a58c7a4aa09c309cb5532ee974becd2a2d86b793ba1c464007f4243d4d3cc8d2984b8318ff57de1d9b852c852094ddc334ab2e9c22aa21ec03a8adcce21b0532
-
SSDEEP
3072:ecsGn5zPoQhdoaMzVT11WQYH1FtiYWb218:mG5zGaMRTjuDiYQ218
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b828a3bf3fdf234549857f105f04664_JaffaCakes118
Files
-
0b828a3bf3fdf234549857f105f04664_JaffaCakes118.exe windows:5 windows x86 arch:x86
886896db7416b7076590f4fa74c12305
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
CreateDIBSection
GetTextCharsetInfo
GetDIBits
PatBlt
SetViewportOrgEx
EndPath
Escape
GetCharWidth32W
SetMapMode
CreateCompatibleDC
CreateCompatibleBitmap
RestoreDC
TextOutA
SelectObject
GetMapMode
kernel32
GlobalCompact
GetModuleFileNameW
GetCommTimeouts
ConvertDefaultLocale
DeleteAtom
GetShortPathNameA
LoadLibraryExW
FlushViewOfFile
FindNextFileW
lstrcpynA
GetCommState
GetComputerNameExW
CancelIo
VerSetConditionMask
GetOverlappedResult
FreeResource
lstrcpyW
GetCurrentProcessId
user32
GetClassInfoW
SetSysColors
LoadStringW
SetActiveWindow
DeferWindowPos
EqualRect
OpenDesktopW
SetScrollPos
ShowScrollBar
DrawTextA
GetSysColorBrush
DialogBoxParamW
GetKeyNameTextW
InflateRect
HiliteMenuItem
GetMessageA
RemoveMenu
ChildWindowFromPoint
GetMonitorInfoW
MapVirtualKeyW
DrawTextW
GetMenuItemID
GetDialogBaseUnits
TranslateAcceleratorA
KillTimer
DestroyAcceleratorTable
LoadMenuA
CharUpperA
LoadIconW
GetUserObjectInformationW
GetKeyboardLayoutNameW
SetWindowRgn
LoadBitmapA
Exports
Exports
?_GetMouseMovePointsEx@@YGXHPAD@Z
Sections
.text Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 24KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ