H:\XrhLtwqb\fxcZdgSredPs\GrKayJauinrk.pdb
Static task
static1
Behavioral task
behavioral1
Sample
414d5a6af903faade68ba7ee2ee13afb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
414d5a6af903faade68ba7ee2ee13afb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
414d5a6af903faade68ba7ee2ee13afb_JaffaCakes118
-
Size
174KB
-
MD5
414d5a6af903faade68ba7ee2ee13afb
-
SHA1
e54d1e9a9bfe555cd134bfeb6bb5b2f3ac659940
-
SHA256
64addf8b618f1e2bd447c066d99723dee07827377942b0d35720d6d613c7025d
-
SHA512
7a9214ea19af46c325490e23d1d9d2293a0c10ddff0a0362a069555e64bc4d447ec540b6396be52558f2bbbff1cca775e32ba110c060ac80535d506976f7fda7
-
SSDEEP
3072:Gv3YNIOcODdy6vAW93k373xtjugRmw2u5L7waondSdcZk0YF+uGha7Ven:yINIOcODdyCdG373xtSc57waodZZk0Yw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 414d5a6af903faade68ba7ee2ee13afb_JaffaCakes118
Files
-
414d5a6af903faade68ba7ee2ee13afb_JaffaCakes118.exe windows:5 windows x86 arch:x86
9092da3170b0851d312e190044a81056
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
SetWindowExtEx
SetMapMode
GetRgnBox
WidenPath
GetViewportOrgEx
Rectangle
msvcrt
wcsncmp
iswalpha
memset
_controlfp
__set_app_type
_wtoi
__p__fmode
__p__commode
_amsg_exit
_initterm
_ismbblead
_XcptFilter
_exit
_cexit
atoi
__setusermatherr
__getmainargs
user32
MapVirtualKeyW
FrameRect
ScrollWindow
MapWindowPoints
IsChild
wsprintfW
MessageBoxA
SetMenuDefaultItem
RegisterHotKey
GetWindowDC
LoadIconW
IsCharUpperW
GetClassNameW
GetDlgItemTextA
GetWindowTextLengthW
LoadMenuA
DrawTextA
shlwapi
ChrCmpIW
UrlEscapeA
kernel32
ClearCommError
FlushFileBuffers
GetModuleFileNameA
CallNamedPipeW
lstrcpyA
TlsGetValue
CreateSemaphoreW
lstrlenA
GetModuleHandleA
SetSystemTimeAdjustment
LoadLibraryA
Exports
Exports
?CreateDlgMessage@@YGHPAXPADK|U
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.list Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 142KB - Virtual size: 330KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE