L:\PwBxPm\fttf\xxfx\udnXb.pdb
Static task
static1
Behavioral task
behavioral1
Sample
24f68dd4680451f1eb6336332083af6d_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
24f68dd4680451f1eb6336332083af6d_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
24f68dd4680451f1eb6336332083af6d_JaffaCakes118
-
Size
105KB
-
MD5
24f68dd4680451f1eb6336332083af6d
-
SHA1
c061d84b6aaff611c8dafa10a430173778488a2e
-
SHA256
7064c28228ee64047bac3fe7da1cf55110fbfd4e07272ce2296b5363011c868d
-
SHA512
6d09bf9332b2336db386afb57434263ca3242fde62ec4b38d7d7cc3c937dc58fae64c8514123c9b625a8eed6027a3bc08398fd94cbd8085d2d1c74d41528bcd0
-
SSDEEP
3072:4U78s4EHHHp3WigXf2QoJs7y9GvJVESui:B7RnNo21JkvJVjui
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24f68dd4680451f1eb6336332083af6d_JaffaCakes118
Files
-
24f68dd4680451f1eb6336332083af6d_JaffaCakes118.exe windows:5 windows x86 arch:x86
40344eea5590d7dac4ba17ab8edd9858
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comdlg32
FindTextW
PrintDlgExW
PageSetupDlgW
ChooseColorW
gdi32
CreateEllipticRgnIndirect
CreatePen
StartPage
Polyline
GetStockObject
GetObjectA
user32
SetWindowLongW
MenuItemFromPoint
DestroyCaret
DestroyIcon
CreateDialogParamA
SetWindowPlacement
GetClassLongA
SetWindowLongA
LoadCursorW
GetMenu
GetWindow
GetKeyNameTextW
GetDialogBaseUnits
ToUnicodeEx
kernel32
GetComputerNameExW
DefineDosDeviceW
GetModuleHandleW
lstrcatW
lstrcatA
FindFirstChangeNotificationW
GetProcAddress
GetThreadLocale
SetThreadPriority
QueryDosDeviceW
SetFileApisToOEM
CloseHandle
GetTickCount
GetModuleHandleA
CreateEventW
Exports
Exports
?ydSsuruYo@@YGXPAHPAM@Z
?LXcmeMrrucwsm@@YGXPAF@Z
?ceoDumnB@@YGPAMPAH@Z
?zyqotwkmfJIjrbQxtiBioB@@YGPAEPAGN@Z
?zoeigmS@@YGPAXD@Z
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 234B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ