D:\DqmsxE\qkkjym\cdiK\KdiJvamF.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3e088527d584e3572ab8b13ec22313f1_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3e088527d584e3572ab8b13ec22313f1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3e088527d584e3572ab8b13ec22313f1_JaffaCakes118
-
Size
112KB
-
MD5
3e088527d584e3572ab8b13ec22313f1
-
SHA1
f1fd26c6274e33e336e26b394dc4d1d6676e2d5e
-
SHA256
a9fe80db8da3e34d865563715e2472613e105389fa2ad815b5afb30bfe02a3b1
-
SHA512
d163e2f68261e36518d075784e9c8b65c6d3107a308ff323c3fd08ac97a640bd9e0962968955cc00fe2ae52d6cf587b428f9f607eaa16947dad6818987e9b7f5
-
SSDEEP
1536:HtPqeVNvfQvc8NZ+mfAIkl6izJEz1KcmTVBnRgX+B7CoUJgYmGobAg5SXA:N5rXQvccZ+oAV6iSBKZTftOXjY95S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e088527d584e3572ab8b13ec22313f1_JaffaCakes118
Files
-
3e088527d584e3572ab8b13ec22313f1_JaffaCakes118.exe windows:5 windows x86 arch:x86
a502eae861b7a9dd8af8e38d95f5a9c2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comdlg32
PageSetupDlgW
GetOpenFileNameW
PrintDlgW
gdi32
CreateFontA
CreateEllipticRgnIndirect
CreateFontW
GetRgnBox
PatBlt
GetWindowOrgEx
EndPath
PtVisible
EnumFontFamiliesExW
user32
DialogBoxParamW
GetMenu
WaitMessage
ShowScrollBar
ValidateRect
GetPropW
CheckRadioButton
GetScrollPos
IsCharUpperA
GetWindowLongW
SetTimer
FillRect
LoadAcceleratorsW
kernel32
CompareStringA
GetProcAddress
lstrlenW
OpenFileMappingW
lstrcmpW
OpenFileMappingA
lstrcmpiW
GetComputerNameA
GetCommTimeouts
LoadLibraryW
SetEndOfFile
GlobalMemoryStatusEx
shlwapi
StrCmpNW
Exports
Exports
?hhferhUbsXm@@YGPAI_NJ@Z
?ucxhukn@@YGFGJ@Z
?AEkfnvNljc@@YGIK@Z
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 150B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ