S:\DauzduTtdknv\ydNqymfgwxfsEw\rvkdxZqyzEvcHsw\igbxanvkzytzUMjzD\iTvcqelKJHuBxbcsjFi\fBnKdhgKiqjugxvsnrwmNb\uPEgxpLalwahiIEC\XgvqSPftaxYsiYgxeqt.pdb
Static task
static1
Behavioral task
behavioral1
Sample
19873ee96859a54e97ba48b783e12f81_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
19873ee96859a54e97ba48b783e12f81_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
19873ee96859a54e97ba48b783e12f81_JaffaCakes118
-
Size
130KB
-
MD5
19873ee96859a54e97ba48b783e12f81
-
SHA1
687017be7f7cb7c9e8fb6024ce597f77ca2cc94b
-
SHA256
40bdbd8a8ecfa1bc6ca7eb84d058e2141e182a4f16fc31d381a53a82602fa1ce
-
SHA512
e82e06d08c5bb37d4a532dca7baf83a947c361fd9fbe7a4fcf3212e174535c3df29c5f568891337edd034a82164fb4b51d4549e022d40ba304c66532611fb476
-
SSDEEP
3072:p0a0/7zK0jiRnbR0J4spVuJD27PIgpV13GFtRWor0JXCvDg5/87qpRWD8nC:p0a0/7zrwWBVuJD4PHp/gIJ8gLpoD8nC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19873ee96859a54e97ba48b783e12f81_JaffaCakes118
Files
-
19873ee96859a54e97ba48b783e12f81_JaffaCakes118.exe windows:5 windows x86 arch:x86
fbba9d9bd0eb9591fe64874eae35d7eb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
GetLayout
CreateEllipticRgnIndirect
GetSystemPaletteEntries
SetROP2
CreateRectRgnIndirect
SelectPalette
RectVisible
CreateCompatibleBitmap
RestoreDC
LineDDA
EnumFontFamiliesW
RectInRegion
SetTextColor
CreateHalftonePalette
shlwapi
StrChrNW
StrCpyNW
kernel32
HeapFree
WriteFile
GetModuleHandleW
SetSystemTimeAdjustment
MulDiv
GetOverlappedResult
CreateEventW
GetCurrentDirectoryW
GlobalCompact
GetCommandLineA
HeapSize
CreateFileMappingW
FoldStringW
IsDBCSLeadByteEx
VirtualQuery
GetProcessHeap
FindResourceExW
HeapAlloc
ReadFile
user32
RegisterClassW
CallWindowProcW
LookupIconIdFromDirectory
IsCharLowerA
DefDlgProcA
DefWindowProcW
PostThreadMessageA
SetScrollPos
ShowCursor
DrawFrameControl
IsCharUpperA
VkKeyScanW
CopyRect
IsDialogMessageW
LockWindowUpdate
OffsetRect
ModifyMenuW
InSendMessageEx
LoadStringW
SystemParametersInfoW
GetKeyboardLayoutNameW
OpenDesktopW
GetSystemMenu
SendMessageTimeoutA
CheckMenuRadioItem
GetNextDlgTabItem
CreateIconIndirect
GetScrollPos
comdlg32
PageSetupDlgW
FindTextW
ReplaceTextW
PrintDlgExW
Exports
Exports
?DufiluIOQF67uiofYIFYfUFyf@@YGKEPA_WG@Z
Sections
.text Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ