S:\azkb\pxezc\wxym\zdYfwnoF.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2cf038f48630291b06f7052e2adbd925_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2cf038f48630291b06f7052e2adbd925_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2cf038f48630291b06f7052e2adbd925_JaffaCakes118
-
Size
112KB
-
MD5
2cf038f48630291b06f7052e2adbd925
-
SHA1
f118cbcc6f53a42cba372f5c61775d14bb350a84
-
SHA256
0a16b5c4c2430bf9b7501a5f55fc3b7e6c391781b371c108cb7cc2c2213ca809
-
SHA512
8e7fbefb6aaa5c05fc45bdba4006f1fa0b88b413c40cdd74f1888ace6e4b7fa1e1380509a8592fd200d4a35af1887f97371c260e98769f8d85559ade8ae4fc86
-
SSDEEP
1536:not7v6mkRgkAAh947mlRsMLpcDfDJKNsgTJWDIsPly6Ag+tsYf:nc7v6Zp47mdckNsgU3PcK+2e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cf038f48630291b06f7052e2adbd925_JaffaCakes118
Files
-
2cf038f48630291b06f7052e2adbd925_JaffaCakes118.exe windows:5 windows x86 arch:x86
7d81caafbe0b7389f7a86ddc89b2767b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
GetTextExtentPoint32W
DeleteObject
Polyline
CreateFontW
CreateRectRgnIndirect
GetPixel
StretchDIBits
CreateDCW
CreateFontIndirectW
shlwapi
StrCmpNW
user32
ClipCursor
DefDlgProcA
IsDlgButtonChecked
ShowScrollBar
CreatePopupMenu
IsCharUpperA
GetPropW
CharUpperBuffW
CharNextExA
KillTimer
PostQuitMessage
GetWindowLongW
kernel32
GetProcAddress
EnterCriticalSection
GetLocaleInfoA
GetComputerNameA
SetLastError
SetPriorityClass
SetThreadAffinityMask
CreateFileW
GetSystemDirectoryA
LoadLibraryW
HeapFree
lstrlenW
lstrcmpiW
FreeLibrary
Exports
Exports
?wacfwgrkIeBtUmebLkEx@@YGPAIFPA_N@Z
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 940B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 103B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ