G:\UabdheHuoa\OndhRrutfu\wcGmGtm\FpxvmMqx\OIUoBnF.pdb
Static task
static1
Behavioral task
behavioral1
Sample
15120299b4546e531fe3283bbf6c15c4_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
15120299b4546e531fe3283bbf6c15c4_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
15120299b4546e531fe3283bbf6c15c4_JaffaCakes118
-
Size
43KB
-
MD5
15120299b4546e531fe3283bbf6c15c4
-
SHA1
38138cc77bd786722687f226bad91e84d27d518f
-
SHA256
5b96f09d0f9598458de4ee43412dad446018bee364f0e97455b3c321c9b5246f
-
SHA512
bff948f576d512c23613fd9eb688e1da125783670c21214a4975e66485b084a58ced72801ee03980a0e729eff9c16b2deb1795dc53687df55eba739cbaf58c0d
-
SSDEEP
768:y5n25DoUsykSlZqtbgzzrCjYrwsDRvcvflfyrIYtm6wZbl9I/iMiHe7nbYd1u:y5HUspucMzKiivfl6MCwNwiFe7byM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15120299b4546e531fe3283bbf6c15c4_JaffaCakes118
Files
-
15120299b4546e531fe3283bbf6c15c4_JaffaCakes118.exe windows:5 windows x86 arch:x86
776bdc4a0001a91171a237e07f93967d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
PathRelativePathToW
StrTrimA
kernel32
ReadFile
GetACP
GetTickCount
OpenFileMappingA
GlobalHandle
lstrcmpiW
LeaveCriticalSection
WriteFile
FoldStringW
GetSystemDefaultUILanguage
IsBadCodePtr
CreateThread
CreateFileW
LoadResource
GetFullPathNameA
GetModuleHandleA
GetModuleFileNameA
user32
GetKeyboardLayout
DragObject
wvsprintfW
EqualRect
DefWindowProcA
GetWindowRect
SetRect
EnableMenuItem
GetMenu
LoadCursorW
GetCaretPos
GetMenuItemID
ModifyMenuW
CascadeWindows
UnionRect
GetMessageW
OpenIcon
CheckMenuItem
DrawTextExW
OffsetRect
TranslateAcceleratorW
CharUpperBuffA
GetDialogBaseUnits
LoadBitmapW
InsertMenuA
AttachThreadInput
MessageBoxExA
CharLowerW
ClientToScreen
SendDlgItemMessageA
comctl32
ImageList_AddMasked
ImageList_GetImageCount
ImageList_Remove
gdi32
GetTextMetricsA
SetBrushOrgEx
SetViewportOrgEx
CreateBrushIndirect
CreateICW
UnrealizeObject
GetROP2
CreateCompatibleDC
CreateCompatibleBitmap
GetFontData
CreatePatternBrush
ExtFloodFill
RestoreDC
msvcrt
exit
Exports
Exports
?IT_CBO_UC@@UGPAIJ@Z
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 250B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.img1 Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.img2 Size: 512B - Virtual size: 360B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.img3 Size: 512B - Virtual size: 360B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.img4 Size: 1024B - Virtual size: 668B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tsc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.itext Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ