F:\nKzDpk\wCBjBrl\IHcvmAg\rlgl\Bfwznh.pdb
Static task
static1
Behavioral task
behavioral1
Sample
48ec3e07ed24ea8abd5c993a68995be0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
48ec3e07ed24ea8abd5c993a68995be0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
48ec3e07ed24ea8abd5c993a68995be0_JaffaCakes118
-
Size
179KB
-
MD5
48ec3e07ed24ea8abd5c993a68995be0
-
SHA1
eb93e0700740ea063b48d81a7a9c7b7cf7962dd2
-
SHA256
b7a4d21326d58c9c7564ebfd92e4a2cef679c4f20758d3b2fc4999f8a1ef8d9b
-
SHA512
ab4bddcf5cecdcbb6da7534a643db8ea1e7fb19add5c5260fce93c4c46aa93f2ebff366092c07f5ead3368094551cb6204ddcc3fafcf3b4fd951e36338726da5
-
SSDEEP
3072:hxBbTGgBGjxFKr7hZZwIR+uTLKvGLk2q5LG18BNjcQ5HyQcyHWct:b8jrShLwwlbkfbBVkuZt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48ec3e07ed24ea8abd5c993a68995be0_JaffaCakes118
Files
-
48ec3e07ed24ea8abd5c993a68995be0_JaffaCakes118.exe windows:5 windows x86 arch:x86
392b637d1a27ae30fdb273e4194c9704
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comdlg32
PrintDlgExW
GetOpenFileNameW
GetOpenFileNameA
kernel32
lstrcmpiW
GetThreadPriority
MapViewOfFile
GetProcAddress
GetThreadTimes
GetFileAttributesW
lstrlenA
lstrcmpW
ReleaseSemaphore
GlobalDeleteAtom
LoadLibraryW
WriteFile
SetPriorityClass
user32
GetClassNameW
SetMenuDefaultItem
GetForegroundWindow
GetMenuItemID
ShowScrollBar
DestroyAcceleratorTable
DrawFocusRect
GetWindowLongW
CreatePopupMenu
GetActiveWindow
GetPropW
IsCharAlphaNumericW
ScreenToClient
gdi32
CreateFontIndirectA
CreateEllipticRgnIndirect
StartDocW
GetDIBits
Escape
GetBitmapBits
SetBrushOrgEx
shlwapi
StrCmpNA
Exports
Exports
?uDufqtdFvxldezbjjbhzc@@YGMPAE@Z
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 139KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ