E:\kmwi\VedS\mtaq.pdb
Static task
static1
Behavioral task
behavioral1
Sample
17da5755dae7db2d45b18cb93572ac7f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
17da5755dae7db2d45b18cb93572ac7f_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
17da5755dae7db2d45b18cb93572ac7f_JaffaCakes118
-
Size
190KB
-
MD5
17da5755dae7db2d45b18cb93572ac7f
-
SHA1
e8265f5563c56deff30c16c38b1fa2ef31af0813
-
SHA256
46d72931385db28cc75e1164554125518433767f7fab9ac5ba12eff53da7c806
-
SHA512
f72358b3c2badf93dbb3dd4702421932baa39770a44719c26eb0fc8fec482cdc06d48009a5413edb4f3faf2291cd9dda0dd63efe6e8f93de22eba20c42aa09f6
-
SSDEEP
3072:Jex0UvyK+VF5kGlz4PoNodrAElyogWpQ1xJ9IpRKvPjH6w/UdF:U0wgVuwo2nCexAUPjaAUb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17da5755dae7db2d45b18cb93572ac7f_JaffaCakes118
Files
-
17da5755dae7db2d45b18cb93572ac7f_JaffaCakes118.exe windows:5 windows x86 arch:x86
4b979b03ddaa27df0b96fbbc709c3291
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comdlg32
ChooseFontW
ReplaceTextW
GetOpenFileNameA
kernel32
MoveFileW
LeaveCriticalSection
ExitThread
SizeofResource
HeapValidate
GetProcAddress
InitializeCriticalSection
FlushFileBuffers
DisconnectNamedPipe
LoadLibraryW
GetLastError
GetFileInformationByHandle
ResumeThread
lstrcmpiW
user32
ShowCaret
InternalGetWindowText
GetWindow
SetMenuItemInfoW
GetWindowLongA
MoveWindow
CharLowerBuffW
RegisterClassA
CreateCaret
GetScrollPos
DestroyCursor
GetClassInfoExW
comctl32
ImageList_ReplaceIcon
ImageList_GetIconSize
gdi32
OffsetViewportOrgEx
AddFontResourceW
CreatePatternBrush
LineTo
CreateRectRgnIndirect
GetPaletteEntries
PtVisible
Exports
Exports
?xEozyyhFpr@@YGPAKN@Z
?kybzhCsnSzjAWpc@@YGG_N@Z
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 151KB - Virtual size: 227KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ