H:\Pzuykall\zUBBsJSf\hcHlcSIftcqbS\iUopXqfsY.pdb
Static task
static1
Behavioral task
behavioral1
Sample
22151f9c86429a32408167299d9a0dee_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
22151f9c86429a32408167299d9a0dee_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
22151f9c86429a32408167299d9a0dee_JaffaCakes118
-
Size
162KB
-
MD5
22151f9c86429a32408167299d9a0dee
-
SHA1
a9ca0115985de164f46b8f7bc742c0b1aeb487b4
-
SHA256
5ae940f68186c28d3dbbc6bbf220778de55ad428ff6cf2f228e26f4c2913aeda
-
SHA512
51efdf50d5adbbac1da1affec36095425099269cf4e5239b6a0b6c2e930b957f5c704987118bf051e0e6f4d298a52658677022c0b0424b86add8d8f94b4696a3
-
SSDEEP
3072:E/89UsawgnEgvmKOtKanUkLAHLQASyEyIKHn4TKfZ/EUwRCQXADwMz+aoVXr6lFz:Q8ufwgFmltfLkL3SyEym+Z85EQX8tow
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22151f9c86429a32408167299d9a0dee_JaffaCakes118
Files
-
22151f9c86429a32408167299d9a0dee_JaffaCakes118.exe windows:5 windows x86 arch:x86
4affdbb67824725943d7acf6dd2b5504
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
StrCmpNW
kernel32
SetCommTimeouts
lstrcmpW
HeapAlloc
CreateDirectoryA
CreateNamedPipeW
GetFileTime
SetErrorMode
HeapWalk
GetCommState
GetVersion
LoadLibraryA
DeleteFileA
lstrcmpA
user32
GetMenuState
IsWindowVisible
OpenIcon
GetForegroundWindow
FindWindowA
Exports
Exports
?SetRemoteDesktopConnec
Sections
.text Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jkhkhg Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vfvc Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hgfjug Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfg Size: 512B - Virtual size: 117B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfgf Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ