A:\puzi\JHtefs\kLllcN\fDrzfc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4292d2baade5fdc8dda0cdc4fd5d9522_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4292d2baade5fdc8dda0cdc4fd5d9522_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4292d2baade5fdc8dda0cdc4fd5d9522_JaffaCakes118
-
Size
112KB
-
MD5
4292d2baade5fdc8dda0cdc4fd5d9522
-
SHA1
d52d865d0073eec21575ea852cf9cbd23136a218
-
SHA256
e65e251317f6194a2b5f36802bd50f531c092ce3ed36e57e91ed7a2e17b1129e
-
SHA512
404f517464a5dfb6dc2646c46367eaa97e9e43912aa1a3fd40d051315ec6e0222a2b0cf8c86259ceb05a0f4bfa12572ccd084b9f10d182338069a218a636d603
-
SSDEEP
3072:H61rO8Jm8jXo0pcv4uBaONiSriYFBLLlV18lVUYI:SrO+nf4RBaMBi+lV13YI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4292d2baade5fdc8dda0cdc4fd5d9522_JaffaCakes118
Files
-
4292d2baade5fdc8dda0cdc4fd5d9522_JaffaCakes118.exe windows:5 windows x86 arch:x86
bcb601f53a735620a64b3aefcb8d8956
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
GetLayout
RoundRect
GetTextExtentPoint32W
GetPixel
CreateFontIndirectA
CreateFontA
StartPage
SetBitmapDimensionEx
RealizePalette
user32
CharUpperBuffW
ShowWindow
IsCharUpperA
MapVirtualKeyA
PostQuitMessage
InSendMessage
ShowScrollBar
GetNextDlgTabItem
GetPropW
MessageBoxExW
GetDlgItemTextW
SetCursor
LoadStringA
GetWindowLongW
kernel32
LoadLibraryW
ConvertDefaultLocale
lstrcatA
lstrlenW
lstrcpyW
GetTimeFormatA
lstrcmpiW
GetStartupInfoA
IsBadCodePtr
IsBadWritePtr
GetVersion
GetProcAddress
GlobalAlloc
shlwapi
StrCmpNW
Exports
Exports
?luOpJMuxiptdg@@YGEDF@Z
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 938B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 91B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ