H:\spKAuK\xVjqap\cRlqyf\cPeokprA.pdb
Static task
static1
Behavioral task
behavioral1
Sample
215fc59eb0e65021cd7a0bdeed73bcb5_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
215fc59eb0e65021cd7a0bdeed73bcb5_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
215fc59eb0e65021cd7a0bdeed73bcb5_JaffaCakes118
-
Size
132KB
-
MD5
215fc59eb0e65021cd7a0bdeed73bcb5
-
SHA1
63084af925cb701fe0444870cde8183036f1ce0d
-
SHA256
45020d16bae50ca268e123b58da00ec89e4305db1f177929eae3f274b0f09122
-
SHA512
fc6be064e639430e837610834d4dd6919c6a6c8ef60090acf07f3cd3b4d0bcd4866bcf6e291485fc5df5419f1a6f05c34840e5a3ecda50c740d50cd63f401660
-
SSDEEP
3072:8PpI+YAGGRrM7Eurthka4kGvNsdGkgGjV3T4eTVy15EBvz2:ElxGGRPG/kamGieV3dTX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 215fc59eb0e65021cd7a0bdeed73bcb5_JaffaCakes118
Files
-
215fc59eb0e65021cd7a0bdeed73bcb5_JaffaCakes118.exe windows:5 windows x86 arch:x86
81b8ddb0a1c828f3cf616eab44c6420c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comdlg32
ChooseFontW
GetOpenFileNameA
gdi32
SetBkColor
GetDIBColorTable
SetDIBits
DPtoLP
CreatePolygonRgn
CreateHalftonePalette
GetViewportOrgEx
comctl32
ImageList_ReplaceIcon
PropertySheetA
ImageList_Remove
ImageList_Read
user32
GetMessageA
DrawStateA
MonitorFromRect
wsprintfW
LoadIconW
RegisterHotKey
SendMessageTimeoutW
SetWindowTextA
SetDlgItemInt
CharNextExA
CreateIconIndirect
SetWindowTextW
SetDlgItemTextW
CopyRect
kernel32
GetFullPathNameW
LoadLibraryA
lstrcatW
GetModuleHandleA
GlobalUnlock
lstrcmpiA
GetTickCount
GetProcAddress
lstrcpyA
HeapFree
GetFullPathNameA
GetAtomNameW
GetSystemTimeAsFileTime
Exports
Exports
?zafcdfVQxWmQz@@YGJKD@Z
?haFxfmgbcQeyfpsUPDippt@@YGJNPAH@Z
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1024B - Virtual size: 648B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ