M:\pjheWme\qMOTVqqH\mQBawvJy\fnof\Hdhvd.pdb
Static task
static1
Behavioral task
behavioral1
Sample
220d16b2bd6530595d2e371636b67e2d_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
220d16b2bd6530595d2e371636b67e2d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
220d16b2bd6530595d2e371636b67e2d_JaffaCakes118
-
Size
173KB
-
MD5
220d16b2bd6530595d2e371636b67e2d
-
SHA1
06ba22807c0d25eec40e05d965c6e4c5c1c6a83e
-
SHA256
f5dee8942d8371f1be6b8b6a843e520b942ef5fa6d373ef19a4ad06fcbd05200
-
SHA512
c2a99da19ea53c80d783924c1c2b1b318b3ed7debb5e179ba4dc2b3b81f93ce3395e2244df2437dfbb187940d2aa7af390c57e141b54dafe311d533d890dc030
-
SSDEEP
3072:/arexwpPd6QxYoQkM2BTiNPLHDT7QrcbPwUPXYZXdpgKB6/3:usHKvB+NPLHDn/XYXLgn/3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 220d16b2bd6530595d2e371636b67e2d_JaffaCakes118
Files
-
220d16b2bd6530595d2e371636b67e2d_JaffaCakes118.exe windows:5 windows x86 arch:x86
25507c020497d8a0b6bf951c3454f5cb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
ClearCommError
CreateRemoteThread
GlobalFindAtomW
GetThreadTimes
CreateEventA
GetProcAddress
WaitCommEvent
SetFilePointer
IsValidLanguageGroup
WaitForMultipleObjectsEx
SetThreadContext
lstrcmpiW
LoadLibraryW
gdi32
PolyBezier
StretchBlt
GetTextExtentPointA
EndPage
RectInRegion
SetRectRgn
GetWindowOrgEx
user32
WindowFromPoint
ShowCaret
AdjustWindowRectEx
ShowScrollBar
RegisterClassA
DialogBoxIndirectParamW
GetWindowLongW
GetPropW
BeginDeferWindowPos
GetMenuItemID
EnumWindows
SetWindowPos
Exports
Exports
?ywhQXgs@@YGIHH@Z
?xuchhmJvAkygcxzFk@@YGHEPAI@Z
?LAhlJZPiNxtwUXshznRp@@YGGPAGK@Z
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.temp Size: 139KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 168B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ