H:\AHafLB\Taxf\kTkTN\lfOdw.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3ef5d4ac548ae1c57114665a392e0d45_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3ef5d4ac548ae1c57114665a392e0d45_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3ef5d4ac548ae1c57114665a392e0d45_JaffaCakes118
-
Size
112KB
-
MD5
3ef5d4ac548ae1c57114665a392e0d45
-
SHA1
d7332dfb058173d92622d4cc1a955e7b2200d2ea
-
SHA256
894a542d257f31e1c97ad7134d090208d4b8aa6fcbe6b4dca71b98437c38e3a2
-
SHA512
81d82ac2f0dcdca53b0ee12fa9b21ac41423c51c08350d56d2501b660ca726a4aa10928819e130a0db929626fecc5dd0c4b9f9dbc0fbb0e5d5264dc7154a4a08
-
SSDEEP
3072:qmkZl59vDRgbOxMythdjS8NUXMSl6o5cPCmJA5:UvRgbOxhv9S8NsMp+cP7C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ef5d4ac548ae1c57114665a392e0d45_JaffaCakes118
Files
-
3ef5d4ac548ae1c57114665a392e0d45_JaffaCakes118.exe windows:5 windows x86 arch:x86
262e413071efcd923d751abc6bf76f02
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetModuleHandleW
lstrcatA
lstrlenW
GetComputerNameExW
lstrcmpiW
FindClose
LoadLibraryW
GetProcAddress
VirtualQuery
WriteFile
GetStartupInfoW
FindNextFileW
LoadResource
GetCurrentThread
gdi32
GetPixel
CreateHatchBrush
DPtoLP
EndPage
CreateDCW
SetTextAlign
RectVisible
PtInRegion
user32
BeginDeferWindowPos
GetPropW
ShowScrollBar
IsDlgButtonChecked
CopyRect
IsCharUpperA
CheckMenuItem
ChangeMenuW
GetScrollInfo
SetWindowLongA
GetKeyNameTextW
GetWindowLongW
shlwapi
StrCmpNW
Exports
Exports
?bcYwifqGIupiNktGhm@@YGME@Z
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 874B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 95B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ