Q:\ldfzFagw\pfqjqD\fvddyj\sjVv.pdb
Static task
static1
Behavioral task
behavioral1
Sample
481a2ac9e472f35c9c17c35d8b9814b7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
481a2ac9e472f35c9c17c35d8b9814b7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
481a2ac9e472f35c9c17c35d8b9814b7_JaffaCakes118
-
Size
133KB
-
MD5
481a2ac9e472f35c9c17c35d8b9814b7
-
SHA1
43644023af03b9fc65bd07ecf281fce160168c61
-
SHA256
c87c9cc8ae7e738b5eb1a7e15ff5fa4f21853f915713ae8e2b72bb98d9ea3ac1
-
SHA512
cf03f191c8039b4746346b5f767e6b9c1a4ec125aeca668da90bfb02b2b019a109befd01977b7d00acc4cdf6ad48861928bab572e8450042712df694121e9546
-
SSDEEP
3072:NRcVUtldNECstXL9wvvAsh3M6vuwZm1V4PJcM1LC7PdydKl:DcVgldNECSXpwHvMIrZu4Ptc7PLl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 481a2ac9e472f35c9c17c35d8b9814b7_JaffaCakes118
Files
-
481a2ac9e472f35c9c17c35d8b9814b7_JaffaCakes118.exe windows:5 windows x86 arch:x86
0d131e1ed5cdd9148f46c956f0756baf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
SetBkMode
CreateRectRgn
RoundRect
GetRgnBox
CreateFontIndirectW
SetWindowExtEx
GetCurrentObject
CreateRectRgnIndirect
comctl32
ImageList_GetImageCount
CreateToolbarEx
DestroyPropertySheetPage
ImageList_GetIconSize
user32
SetMenu
GetKeyboardLayoutNameW
CreateIconIndirect
GetClassNameW
RemovePropW
MapDialogRect
SetRect
IsCharAlphaNumericA
GetWindowTextA
DefDlgProcA
DefFrameProcW
SetProcessDefaultLayout
GetProcessDefaultLayout
InternalGetWindowText
shlwapi
StrCmpNIW
kernel32
EnumSystemLocalesA
IsValidLanguageGroup
lstrlenW
WinExec
CreateWaitableTimerA
SetThreadExecutionState
SetMailslotInfo
GetTimeZoneInformation
GetUserDefaultLangID
FlushFileBuffers
MoveFileW
lstrcmpW
GetSystemTimeAsFileTime
VerifyVersionInfoW
Exports
Exports
?eauFxtDdupkpjIbgaHKy@@YGIPANG@Z
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tbl Size: 512B - Virtual size: 184B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ