F:\enctGBfn\Vthslec\nlmWntr.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3168730bfb576d114fc764a08871740b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3168730bfb576d114fc764a08871740b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3168730bfb576d114fc764a08871740b_JaffaCakes118
-
Size
112KB
-
MD5
3168730bfb576d114fc764a08871740b
-
SHA1
fdde5517de2962ad59abcde497fdb1926a0ab9db
-
SHA256
c6bc0b97d3c20d23cef70e162557aa69d6b4a1a63a1b5d307313aaab84b174f6
-
SHA512
eccb217b666eb6a7dae20c53a3ece3922d46a967da3bce9e869e01afd78197a02225a6e4cf0d50c6ef54f2aef8f8a9f8b006374e6e3c7158abf1f673507ffed1
-
SSDEEP
3072:WnyJ2CtfxBCbt4FUBj5BblzIJ0FBuSP+F5Hw2Bo:cCxBCb2+RzbV9GfHZo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3168730bfb576d114fc764a08871740b_JaffaCakes118
Files
-
3168730bfb576d114fc764a08871740b_JaffaCakes118.exe windows:5 windows x86 arch:x86
52c3af5f9c1dd1b479f6227eaefb9de6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
SetPaletteEntries
RestoreDC
GetNearestColor
PtVisible
FillRgn
CreatePalette
SetMapMode
CreatePolygonRgn
comdlg32
GetOpenFileNameA
GetSaveFileNameW
GetOpenFileNameW
PrintDlgW
kernel32
GetProcAddress
DisconnectNamedPipe
ConnectNamedPipe
lstrlenW
lstrcpyW
LocalAlloc
lstrcmpiW
GetSystemDirectoryA
CancelIo
MoveFileW
LoadLibraryW
CloseHandle
GetCommState
user32
SetUserObjectInformationW
IsCharUpperA
IsWindow
GetPropW
ShowScrollBar
GetScrollRange
GetWindowLongW
GetWindow
ChangeMenuW
CreateWindowExA
SendMessageTimeoutW
RegisterClassExW
shlwapi
StrCmpNW
Exports
Exports
?milBmdwnpbyGUfCyZh@@YGEGG@Z
?gubXhAgmhoyooAxkpcDo@@YGDPAG@Z
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 1004B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 138B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ