W:\awdpqbbzlhqpez\nactPVtk\HmmlLBljSIddx.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4530f96b60c8786c6ecb6b75a7982c33_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4530f96b60c8786c6ecb6b75a7982c33_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4530f96b60c8786c6ecb6b75a7982c33_JaffaCakes118
-
Size
263KB
-
MD5
4530f96b60c8786c6ecb6b75a7982c33
-
SHA1
f1da8cefa7a6150442edccf0acca79bc40bfff25
-
SHA256
25298f6e357ad5900d1bf771bb3d16d428ae873739cbf80058f5818329eea54a
-
SHA512
adea68309ea5b29b8753b2160b8e03b45b8fbbf48586d85fe9179ac7dda5998b74185441b854d7d65d22c5138b08a1342233eb48481faffc3503fca108a6a4a8
-
SSDEEP
6144:fkiXl5ngaHtULN35D9v5gnLdSpQHU8c3v1Tc1ixWNl7u+U32tS:fnXXbNUx393gnuQHXc3VcMAtht
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4530f96b60c8786c6ecb6b75a7982c33_JaffaCakes118
Files
-
4530f96b60c8786c6ecb6b75a7982c33_JaffaCakes118.exe windows:5 windows x86 arch:x86
1f421f126e3655e5fbf3255bd45a53b8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comdlg32
GetFileTitleW
GetSaveFileNameA
PageSetupDlgW
GetSaveFileNameW
gdi32
GetROP2
SetWindowOrgEx
GetCurrentPositionEx
SetWindowExtEx
SetDIBColorTable
EndDoc
SetTextAlign
IntersectClipRect
CreateFontIndirectW
GetTextExtentPointA
SetMapMode
GetRgnBox
ExtFloodFill
SaveDC
CreateDIBitmap
GetClipBox
GetTextExtentPoint32W
SetBkMode
kernel32
WaitForSingleObject
EnumResourceLanguagesA
GlobalFree
GetCurrentThreadId
OpenFileMappingW
FoldStringW
GlobalFlags
GetWindowsDirectoryW
GetLongPathNameW
SetFileAttributesA
lstrlenW
FindResourceA
GlobalCompact
LockFile
GetSystemDirectoryA
HeapSize
HeapReAlloc
LoadLibraryExW
WaitForMultipleObjects
user32
ShowCursor
OpenDesktopW
BeginDeferWindowPos
LookupIconIdFromDirectory
DrawIcon
TabbedTextOutW
DialogBoxParamW
DestroyAcceleratorTable
GetClassInfoA
IsCharUpperA
RegisterClassW
MessageBoxExA
GetAsyncKeyState
DestroyCaret
RegisterWindowMessageA
CreateCursor
IsWindow
GetScrollInfo
SetScrollInfo
GetDlgCtrlID
GetDC
SetForegroundWindow
ArrangeIconicWindows
GetClassLongA
GetCursorPos
SetWindowPlacement
ClientToScreen
WindowFromPoint
GetKeyboardLayout
GetWindowLongA
SetPropW
IsZoomed
OpenInputDesktop
CallWindowProcA
GetFocus
TranslateMessage
GetForegroundWindow
PeekMessageA
ntdll
memcpy
Exports
Exports
?KDFJHjhfuyUFuiuydyufds@@YGKEPA_WG@Z
Sections
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
data Size: 17KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 210KB - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ