W:\drdgguArZrdQ\vdPQjywktJdl\kgbNdeinMlE.pdb
Static task
static1
Behavioral task
behavioral1
Sample
386950adcd42bf5f16db327df3c5845c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
386950adcd42bf5f16db327df3c5845c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
386950adcd42bf5f16db327df3c5845c_JaffaCakes118
-
Size
176KB
-
MD5
386950adcd42bf5f16db327df3c5845c
-
SHA1
ffa66e923ecbd24f4a14662d710dc81594499a14
-
SHA256
ab2180793d7fc173848b22f379b72dec2f971d077b87eb6369beadc538bc1c40
-
SHA512
09b7a5baaae3a3ed9b812ae64ca12ab12d909dd87daa52b7a5a946c969c44da163192bc6c39a3701a579bc6a1e1778395f39ce2b3920f55e04ea98d3aba773b2
-
SSDEEP
3072:pm2GAddKKgl/7GBCRDZHfL5BC6T7x5y4PkVX1tTALjDfiZRLVrM9TpD/BBIF8X8D:MAPS7GgRDpTJPefVXDAWZR4BBIF8sx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 386950adcd42bf5f16db327df3c5845c_JaffaCakes118
Files
-
386950adcd42bf5f16db327df3c5845c_JaffaCakes118.exe windows:5 windows x86 arch:x86
082839249cb5db2296ca225d43ae0b6a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
IsWindow
GetActiveWindow
GetFocus
SetFocus
OffsetRect
IsWindowEnabled
GetWindowRect
ntdll
RtlCompareMemory
kernel32
GlobalGetAtomNameA
GetSystemTimeAdjustment
IsDBCSLeadByteEx
ConvertDefaultLocale
ExitThread
MoveFileExW
GetThreadContext
FindResourceExW
GetSystemDefaultLangID
GetShortPathNameW
VirtualProtect
CallNamedPipeW
gdi32
SetDIBColorTable
SetAbortProc
AddFontResourceW
SetBkColor
TextOutA
GetClipBox
CreateICW
GetWindowOrgEx
CreateCompatibleBitmap
DeleteObject
CreateDCW
Exports
Exports
?InsertFil
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fxc Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fx Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ