L:\rnPtb\zWbQHui\UIvtflO.pdb
Static task
static1
Behavioral task
behavioral1
Sample
344b4bab6d4bae61710f548e058f0937_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
344b4bab6d4bae61710f548e058f0937_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
344b4bab6d4bae61710f548e058f0937_JaffaCakes118
-
Size
172KB
-
MD5
344b4bab6d4bae61710f548e058f0937
-
SHA1
1c76d027995a7bd57863f646291860ed6b35998c
-
SHA256
18da9acf5f9217e13fe7baa8337a3bd2225d301c962db7ecf97bd89918b15c67
-
SHA512
21f1e786d2e89ca65e023f31f182e20ef02624399626b30464c74bbfddca882c07450b4139fd591043512c161a3b1bfa6e8845166f46de0346077429afd17093
-
SSDEEP
3072:cSWzbI7du6leVfIOi2MaU+EPd+Z2GPmDfd1hipLJfdz/rfCl2ihCH/a:cbbidPRB7aeP2Mf9iRJfdrClfU/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 344b4bab6d4bae61710f548e058f0937_JaffaCakes118
Files
-
344b4bab6d4bae61710f548e058f0937_JaffaCakes118.exe windows:5 windows x86 arch:x86
44687ef6bf9c86cf44880e09cabb31af
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
EnumResourceNamesW
ExitThread
GetCommConfig
GetUserDefaultLangID
lstrcmpiW
LoadLibraryW
GetShortPathNameW
HeapAlloc
GetWindowsDirectoryW
UnmapViewOfFile
QueryDosDeviceW
EscapeCommFunction
GetProcAddress
user32
GetWindowLongW
HiliteMenuItem
ShowScrollBar
CheckDlgButton
MonitorFromPoint
GetMenuItemID
DialogBoxIndirectParamA
GetPropW
GetDialogBaseUnits
GetDlgItemInt
ShowCaret
ReleaseDC
LoadCursorW
GetKeyNameTextW
gdi32
GetDIBColorTable
GetTextExtentExPointW
SetBitmapBits
CreateBrushIndirect
GetMapMode
EnumFontFamiliesW
RectInRegion
Exports
Exports
?rTbhvLiwg@@YGIGK@Z
?ifyWrifKzksujz@@YGGI@Z
?qENiznJcuYllrjobq@@YGPAXEI@Z
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 161B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.temp Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.crt Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ