G:\gzqd\vmqOv\Tecib\UyFuvZm\dVlsNjIK.pdb
Static task
static1
Behavioral task
behavioral1
Sample
33eb3206d16fcc7ef8b1da86ad6f6349_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
33eb3206d16fcc7ef8b1da86ad6f6349_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
33eb3206d16fcc7ef8b1da86ad6f6349_JaffaCakes118
-
Size
182KB
-
MD5
33eb3206d16fcc7ef8b1da86ad6f6349
-
SHA1
a282139f5f623d1c60bf2643d9eb4e646e85b40f
-
SHA256
400358d950c2e95e70d129cac1e9a2d4a8c830696a19f47a68d156203dd995cd
-
SHA512
35dab081ea4c0d91f46c582e2c7dafb0c087d0b07912d11d0bd6a267f128650488e149606ea989ef6e7b90dd1f8135475c5c4068341ddeee6bd8818e200cde39
-
SSDEEP
3072:hE0/luEz2SZK2lq0IHXXulN5nLcy0neyauIdedAwDcjGpPNF6oXZhGnslhItvwHF:hEZSZKEJI3Xu75nLcLehuIIAwDLTF667
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33eb3206d16fcc7ef8b1da86ad6f6349_JaffaCakes118
Files
-
33eb3206d16fcc7ef8b1da86ad6f6349_JaffaCakes118.exe windows:5 windows x86 arch:x86
047900a222592d47349b3998081fd3f8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
InvertRect
ClientToScreen
GetSysColor
CopyRect
SetMenuItemInfoW
InsertMenuA
GetKeyNameTextW
GetClassInfoW
DrawMenuBar
GetForegroundWindow
GetClipCursor
msvcrt
fputc
isxdigit
isalpha
swprintf
exit
toupper
shlwapi
PathMakePrettyW
comdlg32
PageSetupDlgW
PrintDlgW
ReplaceTextW
comctl32
ImageList_GetImageCount
ImageList_ReplaceIcon
PropertySheetA
CreateToolbarEx
gdi32
SetPaletteEntries
SetStretchBltMode
RestoreDC
StretchBlt
SetAbortProc
ntdll
memset
kernel32
SetThreadPriority
GetUserDefaultLCID
TransactNamedPipe
CreateFileMappingA
CreateFileA
lstrlenW
Exports
Exports
?iPnJvvmdoiS@@YGHGPAE@Z
Sections
.itext Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 142KB - Virtual size: 226KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ