G:\waPjwvA\XdnbpVf\dvPuT\kxByzr\dEnhyBgu.pdb
Static task
static1
Behavioral task
behavioral1
Sample
167d93671e6698358b68b39408653da2_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
167d93671e6698358b68b39408653da2_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
167d93671e6698358b68b39408653da2_JaffaCakes118
-
Size
97KB
-
MD5
167d93671e6698358b68b39408653da2
-
SHA1
18803ea1d808d93c20c7a207ffdba07fb4bb7f4b
-
SHA256
d5ffb4343321fc41e7e6c49af7379515c27c63628dcef675bccbfd69c7d05c14
-
SHA512
06852cc0fd33c22e156a84c45890b55106e218a65326d48a37ab539dad6e11ba77a198351739b6c567a03a3e70963077b1fbc4227f697da62090443dda4e8d2d
-
SSDEEP
1536:R2qi0+Hwu0gnmlOdO+JScpWcg67W+81YatwnxdnBuvIjSkwmcD+:ROwfwfRgCB81YaCnxdnBRjq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 167d93671e6698358b68b39408653da2_JaffaCakes118
Files
-
167d93671e6698358b68b39408653da2_JaffaCakes118.exe windows:5 windows x86 arch:x86
8b870ddd530070baa9146873b2efc635
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
UnrealizeObject
StartDocW
CreateDIBSection
StartPage
CreateFontIndirectW
CreateHalftonePalette
user32
DrawStateW
BeginDeferWindowPos
ChildWindowFromPoint
GetClassLongA
DefFrameProcA
TabbedTextOutW
IsDialogMessageA
LoadAcceleratorsA
GetMonitorInfoW
ScrollWindowEx
GetDlgItemTextW
GetUserObjectInformationW
SendMessageW
RegisterWindowMessageW
ntdll
wcslen
iswspace
comdlg32
CommDlgExtendedError
FindTextW
ChooseFontW
kernel32
GetCommState
GetProcAddress
GetShortPathNameW
SetFileAttributesA
DeleteFileW
WaitForMultipleObjectsEx
ExitThread
GetCurrentProcessId
Exports
Exports
?eNidQqbnxKolsgBltrqJuX@@YGJPAG@Z
?rxEvsvahsrbsvUlgIwpFT@@YGGPAH@Z
Sections
.text Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ