Z:\dburzlo\jIFfswz\TJpc\earEsXg\cmygbTlk.pdb
Static task
static1
Behavioral task
behavioral1
Sample
228add72912646794569d36f456ced6d_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
228add72912646794569d36f456ced6d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
228add72912646794569d36f456ced6d_JaffaCakes118
-
Size
182KB
-
MD5
228add72912646794569d36f456ced6d
-
SHA1
8a2a05a7cb038e860ed1ae1fd9948f0c84ab104a
-
SHA256
03524c58508b8181adf0de9763bfd180d7b224f9f87fbd591ee1bf3594e201f2
-
SHA512
39f0b1efb0fc0b83dee69eec2e508b1b7e70be85da4e5835c3dfaa19bea324d9b4302a30c6168180cae84fbd62378147cee2e3ed1c403ef8c4ec242fc591178b
-
SSDEEP
3072:hKJwnDN/kygw6yD7M0kaGqjvgd5M4zmyFxcElBYiwG75MOmcDRlHP5Kp+yq4N:hRnhx5o0kaG4voZ5FqERXmkR74nq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 228add72912646794569d36f456ced6d_JaffaCakes118
Files
-
228add72912646794569d36f456ced6d_JaffaCakes118.exe windows:5 windows x86 arch:x86
428883f5897bf8782d1e5bdd2c7b7ba7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ntdll
_aullrem
kernel32
GlobalGetAtomNameA
GetProcAddress
WaitForMultipleObjects
TlsSetValue
LockResource
RegisterWaitForSingleObject
lstrlenW
lstrcmpiW
GetLocaleInfoA
FindResourceW
CreatePipe
GetModuleHandleW
lstrcpynW
RaiseException
user32
UnloadKeyboardLayout
AllowSetForegroundWindow
GetWindow
DeferWindowPos
GetDlgItemTextW
BringWindowToTop
DestroyCursor
GetScrollPos
SetUserObjectInformationW
SetScrollPos
LoadCursorW
SetDlgItemTextW
LoadIconW
SendMessageA
gdi32
IntersectClipRect
PtVisible
CreateDCW
ScaleViewportExtEx
RoundRect
PtInRegion
SetMapMode
Exports
Exports
?yvKvemnKZpIixqjmsfLaMa@@YGPAKI@Z
?llubhdtr@@YGKG@Z
?vcbZoDthecyzVpb@@YGXI@Z
?FkhttpywRemJmiCswc@@YGXFI@Z
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 203B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 141KB - Virtual size: 205KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ