S:\yafxyj\tVrNeXFs\TanvTwig.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1008e8f12d23d4e35e3c80e5a165a77a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1008e8f12d23d4e35e3c80e5a165a77a_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1008e8f12d23d4e35e3c80e5a165a77a_JaffaCakes118
-
Size
112KB
-
MD5
1008e8f12d23d4e35e3c80e5a165a77a
-
SHA1
bfabc81c9bcc5643a5fa9f79e13d3054dbf31cff
-
SHA256
91e78b913454274313dfafae423455d3b851971d6d8929843698d79f8b6bce97
-
SHA512
5acc8157e00996aeab5ad8ed977ccefb28ef119e364fe844cebde113f979ebb2398c8f9e1aef5ccd413abd03404dbe7ee8d4bb4764c015b51e95c01f34aa5518
-
SSDEEP
1536:ZF2XxqbhP7qsWF9LIRpA6ko5JZduIbqU9z+Qoyg9u2ChBzlw968nJpQZ5AghmDQ:E2NdWFNInRG809u2+BzlY6UJiZvhmDQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1008e8f12d23d4e35e3c80e5a165a77a_JaffaCakes118
Files
-
1008e8f12d23d4e35e3c80e5a165a77a_JaffaCakes118.exe windows:5 windows x86 arch:x86
de72ac79dadb1ee10ea912cfed578aea
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
StrCmpNW
user32
IsCharUpperA
wvsprintfW
CharPrevA
GetWindowLongW
CharUpperA
GetDlgItemInt
AdjustWindowRect
SetDlgItemTextA
BeginDeferWindowPos
SystemParametersInfoA
ShowScrollBar
ShowWindowAsync
GetPropW
kernel32
lstrcpynA
IsValidLocale
GetTickCount
LoadLibraryW
HeapCreate
GetExitCodeThread
VerSetConditionMask
SetHandleCount
GetProcAddress
GetWindowsDirectoryW
lstrcmpiW
lstrlenW
LocalUnlock
comdlg32
ChooseColorW
PrintDlgW
GetSaveFileNameW
gdi32
GetTextExtentPoint32A
CreatePolygonRgn
CreateBitmapIndirect
GetLayout
GetTextExtentPointA
StartPage
SetBkMode
DPtoLP
Exports
Exports
?lobVJsy@@YGDKG@Z
?cqelVKd@@YGGPAGPAF@Z
?vlHZZreJgkJ@@YGPANJ@Z
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 1022B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 150B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ