N:\wTJIhk\qDAsxsoq\nBpcB.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2ffb407b654d07bad83f4b7ecd111544_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ffb407b654d07bad83f4b7ecd111544_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2ffb407b654d07bad83f4b7ecd111544_JaffaCakes118
-
Size
107KB
-
MD5
2ffb407b654d07bad83f4b7ecd111544
-
SHA1
c754c6ff98ca209fbd43383065785dd6a35f9724
-
SHA256
3f76626d25a714796ba7202a2e4b2df836398423189772078f251b172fd1a618
-
SHA512
a5ee6b49806d766668de599aa3782a83aa56345dde59cf50c44988ac0a0a5de7a069d5a03b6e21237b8add60d456a9751d769648a8b025ec31d6662a54e46c5b
-
SSDEEP
1536:z1Jspn2iZfbqobBUUmtxLSWq9ZWMD3suAdcAX1QY8F7rZ5Mn2UMYikXiQ6evo:zTe2iZjfbzmC39MMD8uicAXA3jUMYi+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ffb407b654d07bad83f4b7ecd111544_JaffaCakes118
Files
-
2ffb407b654d07bad83f4b7ecd111544_JaffaCakes118.exe windows:5 windows x86 arch:x86
efc8a21aa8d44b5a28a1f198befaded3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
PathCombineA
ord29
PathCommonPrefixW
gdi32
GetCharWidth32W
ExtFloodFill
GetCurrentObject
PatBlt
GetTextExtentPointA
GetTextExtentPointW
user32
CharNextExA
CheckMenuItem
DrawMenuBar
SetWindowPlacement
SetTimer
CharToOemW
AppendMenuW
LoadIconW
CheckDlgButton
GetWindowTextLengthW
CopyImage
LockWindowUpdate
comdlg32
GetOpenFileNameA
GetFileTitleW
ChooseFontW
GetSaveFileNameW
kernel32
GetModuleFileNameA
WriteFile
ExitProcess
lstrlenA
GetModuleHandleA
GetComputerNameA
GetModuleHandleW
DeleteFileW
Exports
Exports
?vXtzmbprFqzlKyDezxoSg@@YGJH@Z
?DHRZdXCHnCu@@YGFPAIPAI@Z
?blrjaRotrzknrITsCrX@@YGPAXEF@Z
?cpCwVuuggUnpMyzYZy@@YGGF@Z
Sections
.text Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 286B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 66KB - Virtual size: 218KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ