R:\gpUUcUpihJj\tVhtFYAPM\bpHbphqzxxuzvz.pdb
Static task
static1
Behavioral task
behavioral1
Sample
27f0b663fa143a11f1306673cfe202f1_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
27f0b663fa143a11f1306673cfe202f1_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
27f0b663fa143a11f1306673cfe202f1_JaffaCakes118
-
Size
165KB
-
MD5
27f0b663fa143a11f1306673cfe202f1
-
SHA1
8113968601aa178d5eee2c5791ed16fb3f754c6b
-
SHA256
954ff5cf12b8cceb801c2db55ff9fcf1ecb540af7b4200732c9d53edf23761bb
-
SHA512
f0fdb8c9626df9e16e9d9e1b35d935f4a4937627ab2543d8f7e47c201504aea93219a579587474aaaa010ca73d0b22011fdb7129be25abcd1370eb5ef7735299
-
SSDEEP
3072:bEaEEu+WER0eVOU1p9PE0WU0+W264jt53ke2i4PCCqU+HLQx/C:4n+WXeVJplEO0+W264jtSe2iNCqU+Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27f0b663fa143a11f1306673cfe202f1_JaffaCakes118
Files
-
27f0b663fa143a11f1306673cfe202f1_JaffaCakes118.exe windows:5 windows x86 arch:x86
dc2f904e64bedc3b055b56af52e3c955
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
IsWindowEnabled
GetClientRect
GetForegroundWindow
SetFocus
OffsetRect
AdjustWindowRect
IsWindow
GetTopWindow
kernel32
GetCompressedFileSizeW
GetFileType
HeapReAlloc
GetVersionExA
GetSystemWindowsDirectoryW
GetShortPathNameW
ReleaseSemaphore
MoveFileA
GetSystemDirectoryW
UnmapViewOfFile
DisconnectNamedPipe
GetCurrentThreadId
CompareFileTime
SetTimerQueueTimer
ntdll
RtlCompareMemory
Exports
Exports
?InsertFil
Sections
.text Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fxc Size: - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fx Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ