I:\UGgf\tbto\GkzwQesg\uKOAdk\hgnvblmp.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3a466165f69958d16d82f3f5c9eadd36_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3a466165f69958d16d82f3f5c9eadd36_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3a466165f69958d16d82f3f5c9eadd36_JaffaCakes118
-
Size
111KB
-
MD5
3a466165f69958d16d82f3f5c9eadd36
-
SHA1
f3f984c55f528aa5a6fcfc23884aad3c1c3de597
-
SHA256
badf6ac6e700caefb1b3156b50f6b0abd96a9c00ff026f306d780cfca29d0c93
-
SHA512
3871ee95ae55f127ee015f75e10a010be09ec3d6d2afe6614d8ad8adb61d32845ce589d8bb557dbb7c47602be6e51691b2ea2a05e14da01aac81f15d88d51652
-
SSDEEP
1536:7wSDZwx3oQlp83zmIMHNwbrmnpWb+SNx7ZllmYDu4AzbRZPit7Jex18qAgd2iN:7N2hbKMCmpWb+UmYDu4kit7m26d2i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a466165f69958d16d82f3f5c9eadd36_JaffaCakes118
Files
-
3a466165f69958d16d82f3f5c9eadd36_JaffaCakes118.exe windows:5 windows x86 arch:x86
9bd38f55ab059ad33e2a532a479a2a8f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetProcAddress
lstrcmpiW
UnmapViewOfFile
SetupComm
LockFile
GetDateFormatW
GlobalFree
SetNamedPipeHandleState
LoadLibraryW
LCMapStringW
lstrlenW
HeapUnlock
comdlg32
PageSetupDlgW
PrintDlgExW
PrintDlgW
user32
GetPropW
GetScrollInfo
TrackPopupMenuEx
CharToOemA
DispatchMessageA
AdjustWindowRectEx
GetWindowLongW
SetSysColors
ShowScrollBar
SetParent
IsCharUpperA
SystemParametersInfoW
gdi32
CreatePatternBrush
SetPixel
MoveToEx
PtVisible
GetTextExtentExPointW
LineTo
CreateEllipticRgnIndirect
CombineRgn
shlwapi
StrCmpNW
Exports
Exports
?DDqaUNewWbaNolhikkmz@@YGEPAN@Z
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 956B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 99B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ