P:\ajBfbvCQ\vjlK\kcjCStdZ.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2502ed940c93e60c671a5ae04bca6d39_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2502ed940c93e60c671a5ae04bca6d39_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2502ed940c93e60c671a5ae04bca6d39_JaffaCakes118
-
Size
57KB
-
MD5
2502ed940c93e60c671a5ae04bca6d39
-
SHA1
fdaf65335cfb26fa147669eddaa3cb3ba9a35334
-
SHA256
41b89fc75402fb3aecd923b23481cdfab052bedeec9ae977b84f38f454087c85
-
SHA512
502c26efa435679472b1e7967a76479dcfc76031e9caa63695f2738d3b0fb5c4fee584f7f91e20dd958b79d2025b89037524f2ef196896778da1f3f3cfe2a73f
-
SSDEEP
1536:t87Cr2Np0FGfl19k4kxDAZpP6l7Upw3zZB8xcCkJU/3t:tW8up/k4kxtWp4ZNBA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2502ed940c93e60c671a5ae04bca6d39_JaffaCakes118
Files
-
2502ed940c93e60c671a5ae04bca6d39_JaffaCakes118.exe windows:5 windows x86 arch:x86
ce8673e67ddbb8879e18a3c1a4481153
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
Escape
PtVisible
StretchBlt
SetAbortProc
GetStockObject
SaveDC
user32
LoadCursorW
EnableWindow
LoadImageA
GetScrollRange
SetPropW
PeekMessageA
WindowFromPoint
InternalGetWindowText
BeginPaint
CreateDialogIndirectParamW
TileWindows
CharUpperW
GetParent
SetDlgItemTextA
kernel32
CreateRemoteThread
LoadLibraryW
GlobalMemoryStatusEx
GetCurrentThreadId
VerifyVersionInfoW
ExitProcess
lstrcpyA
HeapLock
shlwapi
PathCombineA
PathCommonPrefixW
PathRenameExtensionA
StrCSpnIW
Exports
Exports
?pXvTobkUEcq@@YGPAIPAHM@Z
?dGwdCJiqyYpuDhRqhOoOtc@@YGGFE@Z
?xCplKrPojwAjqjldUfp@@YGF_NF@Z
Sections
.text Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 147KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 173B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ