W:\xkiUsj\urjcj\Uzha\hmwb.pdb
Static task
static1
Behavioral task
behavioral1
Sample
39bce7df3a5337b57a44afcb997b2a62_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
39bce7df3a5337b57a44afcb997b2a62_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
39bce7df3a5337b57a44afcb997b2a62_JaffaCakes118
-
Size
113KB
-
MD5
39bce7df3a5337b57a44afcb997b2a62
-
SHA1
ba286e7768dda13b9dc0105cf2e037ae4b6ede08
-
SHA256
d0ef15633f47de1394b71fbe798d772f5e1d6611918b1bf5060ef15646f79289
-
SHA512
b42a2db854230f6900709d303c97b50d27217bf34d6e5a50ebee9c4373e093e7ad106b24f771820261e9dd576f9088b3ffe01a47524fc87b41c8e700b1fa5a33
-
SSDEEP
3072:3N/+CKgOLkbGgAN6LHwNIl/JKIbvp9sVHy:01LkzcShi7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39bce7df3a5337b57a44afcb997b2a62_JaffaCakes118
Files
-
39bce7df3a5337b57a44afcb997b2a62_JaffaCakes118.exe windows:5 windows x86 arch:x86
76ba08a8823b4f0a9412390f2c7023f0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
ImageList_GetIcon
InitCommonControlsEx
ImageList_ReplaceIcon
CreateStatusWindowW
kernel32
LoadResource
GetSystemDirectoryA
GlobalMemoryStatus
CreateEventA
FileTimeToSystemTime
MapViewOfFile
LoadLibraryW
GetNumberFormatA
ReadFile
lstrlenW
lstrcmpiW
GetProcAddress
comdlg32
GetOpenFileNameA
GetFileTitleW
ChooseColorW
GetSaveFileNameW
shlwapi
StrCmpNW
gdi32
CreateFontW
GetTextMetricsA
SaveDC
SetWindowOrgEx
SelectClipRgn
EnumFontFamiliesW
SetROP2
GetWindowOrgEx
user32
GetDlgItemInt
GetKeyboardLayout
DestroyWindow
GetUpdateRect
GetPropW
CharUpperBuffA
IsCharAlphaNumericW
EqualRect
VkKeyScanW
GetWindowLongW
IsCharUpperA
GetMessageW
InvalidateRect
ShowScrollBar
Exports
Exports
?hvawSEnGdjTAwv@@YGNJPAE@Z
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 94B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ