J:\gIembgV\uzhnk\yaUy.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0f37065e04826da11c6dd3a14e08c8d7_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0f37065e04826da11c6dd3a14e08c8d7_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0f37065e04826da11c6dd3a14e08c8d7_JaffaCakes118
-
Size
150KB
-
MD5
0f37065e04826da11c6dd3a14e08c8d7
-
SHA1
9854391e4264abb5f36a6df5682f891e24548149
-
SHA256
806dde5d388ecc7fd8ec689556a70d7db7c9aec5353d544bf8f9a7b2cffa94f1
-
SHA512
741c25988981c53286583ea08f4b35aca3d97e5e21d5497bb50c60a5f9ba86a06deb9f5359a94d4c0ad59a9a618b6f8bc520d9e197bfedb056bae464236748c8
-
SSDEEP
3072:EDo/CQOfZ7mG16wBBnvrGYnf5QfN7cRWdgaZQuKVGVDGEHzR8XPdPmHw2:EDo/CQOfBm46wvBnyfCRxaCujbHzOXPS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f37065e04826da11c6dd3a14e08c8d7_JaffaCakes118
Files
-
0f37065e04826da11c6dd3a14e08c8d7_JaffaCakes118.exe windows:5 windows x86 arch:x86
52162ff585e5e69d119d301a5fbf0281
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
ImageList_ReplaceIcon
ImageList_GetImageCount
ImageList_Destroy
PropertySheetW
gdi32
ExcludeClipRect
CreateCompatibleBitmap
RemoveFontResourceW
GetTextMetricsW
GetTextCharsetInfo
SetWindowExtEx
msvcrt
fgetc
gets
gmtime
putc
wcschr
setlocale
wcsncpy
kernel32
GetTickCount
Sleep
OpenEventW
QueryPerformanceCounter
GetLocalTime
GlobalCompact
GetOverlappedResult
GetCommandLineW
shlwapi
PathGetArgsA
ChrCmpIW
user32
LoadAcceleratorsA
InternalGetWindowText
SystemParametersInfoA
PostQuitMessage
CharLowerA
BeginDeferWindowPos
GetActiveWindow
RegisterClassA
CharUpperA
VkKeyScanW
GetForegroundWindow
GetAsyncKeyState
GetCaretBlinkTime
GetKBCodePage
Exports
Exports
?yzufyxqtPlyiFYnfjccu@@YGNNE@Z
?xdyPoxzmpbZdTmtJj@@YGDHK@Z
Sections
.itext Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 129KB - Virtual size: 429KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ