T:\bunaheqj\kYkeht\Xuwvicc\wavlth\iliupryM.pdb
Static task
static1
Behavioral task
behavioral1
Sample
478623efdf9e993446c6a989b7c934ef_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
478623efdf9e993446c6a989b7c934ef_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
478623efdf9e993446c6a989b7c934ef_JaffaCakes118
-
Size
157KB
-
MD5
478623efdf9e993446c6a989b7c934ef
-
SHA1
81620898c78606f36ad8b7140f79e00083840022
-
SHA256
2a317c35a7d7a452a8f692012e8638654997b90b9b356d87e6916835e86ab030
-
SHA512
32f55d7a8b4b382345000fc18182fe6fdf7a723ae4e28b8e532866ef0a30215dd8a8f0762404d2265448ee00bd01e357423f5997a0047ef35be8da7fd090579b
-
SSDEEP
3072:VZl988gPhvzP3dUMySjau3ImjQyqrVSQkWC57EeKiYchFC5p:Vr988MhvLrjaSIjrV3EVzJXM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 478623efdf9e993446c6a989b7c934ef_JaffaCakes118
Files
-
478623efdf9e993446c6a989b7c934ef_JaffaCakes118.exe windows:5 windows x86 arch:x86
930bee5abe219180bb213373a65822b2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
RegisterWindowMessageW
InvalidateRgn
SetScrollRange
SetLastErrorEx
mouse_event
CreatePopupMenu
WaitForInputIdle
RemoveMenu
TrackPopupMenuEx
SetDlgItemTextW
DestroyMenu
IsZoomed
CharPrevW
GetKeyboardLayoutNameW
shlwapi
UrlGetPartW
StrCpyW
StrToIntA
kernel32
GlobalMemoryStatus
lstrcmpiA
ExitProcess
GetLocalTime
SetupComm
lstrcpyW
FindFirstFileA
lstrcmpiW
lstrcpyA
ConnectNamedPipe
gdi32
RectInRegion
ScaleViewportExtEx
IntersectClipRect
CreatePenIndirect
CreateEllipticRgnIndirect
DeleteObject
Exports
Exports
?fcbkie_a@@YGPAKKPAH@Z
?_WUWQco@@YGPADMH@Z
?YYladOSxsqv__wD_RI_@@YGHIPAE@Z
?GONLNEH__U_SZH__S@@YGDFG@Z
?JSTyRRD_DZEG___KK_@@YGJPAJPAH@Z
Sections
.text Size: 57KB - Virtual size: 389KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idat Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pacdat Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ