P:\pHVpIa\zuny\uybt\tvrLqd.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0f36252e862faff258c36be784bf9349_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0f36252e862faff258c36be784bf9349_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0f36252e862faff258c36be784bf9349_JaffaCakes118
-
Size
220KB
-
MD5
0f36252e862faff258c36be784bf9349
-
SHA1
71a23ba590163637304db0234b495b7cdffd33ee
-
SHA256
4ba63da8636b05dc92c7d199a82f3498f758504899867cd088113f0aa799ef0d
-
SHA512
add0593e51ffe902e9695bbd24cb9dd1bdfcf72f7acd06bfe14bc59c7e5bcb5b78224cd23aab16aee931e1cccad8f12dd2d2d8618af096ef0b382ad2900d1336
-
SSDEEP
6144:tGgYG/h5qnilFlTcwCwLvvVQlUXDBqsw9ZOS/Oh7zFz:tWG55qiywCwLuSsLW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f36252e862faff258c36be784bf9349_JaffaCakes118
Files
-
0f36252e862faff258c36be784bf9349_JaffaCakes118.exe windows:5 windows x86 arch:x86
1ee3f6bab18e74dca50aeb9d314c2cd4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
CreateToolbarEx
ImageList_GetImageCount
ImageList_GetIcon
ImageList_AddMasked
gdi32
GetDIBColorTable
CreateDiscardableBitmap
GetBkMode
GetObjectW
CreateCompatibleDC
RestoreDC
kernel32
CreateFileW
IsDBCSLeadByte
EscapeCommFunction
LocalLock
IsValidLanguageGroup
SetCommMask
user32
EnableMenuItem
IsChild
GetActiveWindow
wsprintfW
SetRect
TileWindows
CascadeWindows
IsRectEmpty
CharNextExA
FillRect
TranslateAcceleratorW
AppendMenuW
SetClassLongW
SetUserObjectInformationW
Exports
Exports
?QxhpEYT_F_WF___Rhcbue_@@YGDPAG@Z
?B__PJ_FVMEF_AYQewoo@@YGGJPAH@Z
?is__j_xjuilXWXp@@YGJPAHPAF@Z
?HASRv__@@YGXF@Z
?_JMQ_Aa_u_olfg@@YGXDPAI@Z
?XUV____DRe_wrXRA_@@YGKI@Z
?JAXJE_l@@YGMPAG@Z
?hnIVRH_NyfhgnBFFKRT_N@@YGPAXI@Z
?_HU_GPsTXL_LAMAT_@@YGDGN@Z
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 187B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Info Size: 111KB - Virtual size: 274KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ