J:\mTFjlITmqcrsxrhp\BLtMhrGswhAgcnEfdecnOd\pTqhunkIycvirztzlDwuB\ojkenfobXlZxhfxgbtI\oTppbEqJnNyacjwVpdqar\RSlhjhdwxbgpjwlnrxxwEw\JSwIhuYuftcgrjei\hZJxyNSzpjgGs.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2a5c7b1d56f574035ebad1b5073ca9f7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2a5c7b1d56f574035ebad1b5073ca9f7_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a5c7b1d56f574035ebad1b5073ca9f7_JaffaCakes118
-
Size
150KB
-
MD5
2a5c7b1d56f574035ebad1b5073ca9f7
-
SHA1
cce70f0f6150eb9ae4484b2d7e1a9d184ac2ed4e
-
SHA256
2fdf1492c952f66b55b0634cc55a7db938403167efb14155d3141cc9e8adf10b
-
SHA512
827bc24b26f135b174bbc2dba762da675b1bcdbae71c3c45331bc7f1460bb6bfc29fadf2211df77f8a0deccfae1e4af6911a507c6c65ad3bb54bd9df715fe270
-
SSDEEP
3072:CD97Ntlfdz6f+CHy7hxq1uK7WQyJSIeznLpRoRpUGEL5mGMh:CDXtlfRCSGWdJOpuzEL0T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a5c7b1d56f574035ebad1b5073ca9f7_JaffaCakes118
Files
-
2a5c7b1d56f574035ebad1b5073ca9f7_JaffaCakes118.exe windows:5 windows x86 arch:x86
71366414e987957bf03bc1aafb6e40f9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
BeginPaint
SetMenuItemInfoW
AdjustWindowRectEx
GetMessageW
ShowOwnedPopups
LoadBitmapW
GetDC
CopyAcceleratorTableW
GetClassInfoExA
SetRectEmpty
SetDlgItemInt
CreateDialogParamA
GetDoubleClickTime
GetMenuStringA
FindWindowExA
InSendMessageEx
OpenInputDesktop
PeekMessageA
GetDlgItem
CheckMenuRadioItem
DrawIcon
DrawTextA
IntersectRect
SystemParametersInfoA
GetClassInfoA
ReleaseDC
ShowScrollBar
LoadCursorW
ScrollWindowEx
gdi32
CreateHalftonePalette
GetTextFaceW
SetLayout
GetObjectA
GetTextColor
SetBrushOrgEx
DeleteDC
SetRectRgn
DPtoLP
CreateFontA
GetROP2
Polyline
GetDIBColorTable
shlwapi
StrChrNW
StrCpyNW
comdlg32
GetOpenFileNameW
PrintDlgW
kernel32
GetCommState
CreateRemoteThread
GetVersion
GetProcessHeap
GetThreadPriority
SystemTimeToFileTime
GetModuleHandleW
TransactNamedPipe
ResetEvent
QueryPerformanceCounter
FormatMessageW
CreateFileA
FormatMessageA
FindResourceExW
HeapAlloc
GetSystemWindowsDirectoryA
HeapFree
CreateNamedPipeA
Exports
Exports
?DufiluIOQF67uiofYIFYfUFyf@@YGKEPA_WG@Z
Sections
.text Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ