F:\ppUzdaco\fKRqGprdxWbi\vjWlumKymka\xtumCpiHmcAI\hVivtxZ.pdb
Static task
static1
Behavioral task
behavioral1
Sample
170456b6e86bf2aaf33f737c289755e3_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
170456b6e86bf2aaf33f737c289755e3_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
170456b6e86bf2aaf33f737c289755e3_JaffaCakes118
-
Size
159KB
-
MD5
170456b6e86bf2aaf33f737c289755e3
-
SHA1
0077a4f52683181897695a324a2f30c454e0af21
-
SHA256
137cfbe82e303be136e82dadc054d88e827d6cfa49df438ac92a79ee06f2c851
-
SHA512
610b991640955605f255cdee0f372b20d5ca7e764979651d60d2c56f6ffac79da4ca9185f26f93b1722a9d089814afa754400243357722a7a114d2eb191e848a
-
SSDEEP
3072:AFQPzPRT3mtXBPG40PIepX3ZgZOqCx5wSb4yY+ba3t:cQTFmtXBO40wepX3ygHs+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 170456b6e86bf2aaf33f737c289755e3_JaffaCakes118
Files
-
170456b6e86bf2aaf33f737c289755e3_JaffaCakes118.exe windows:5 windows x86 arch:x86
cfaf18892c1e93ad80bca6ffbc1b5ad3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
ShowCaret
GetForegroundWindow
CallWindowProcA
GetMessageTime
UpdateWindow
FindWindowA
ShowOwnedPopups
GetKeyNameTextW
GetDialogBaseUnits
ReplyMessage
GetTopWindow
SetDlgItemTextW
GetNextDlgTabItem
GetDesktopWindow
CharLowerW
LoadMenuW
GetActiveWindow
kernel32
EnumResourceNamesA
GetLocaleInfoW
GetModuleHandleW
LocalUnlock
FindResourceExW
lstrcmpW
SetCurrentDirectoryA
GetCommTimeouts
Exports
Exports
?GetValidated
Sections
.text Size: 154KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vbf Size: 512B - Virtual size: 107B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iuy Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mjh Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ghj Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE