V:\FAet\EeKUCpup\KmlmdiC\vXjNQcn.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4953538ea7d90833f849241648d2c251_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4953538ea7d90833f849241648d2c251_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4953538ea7d90833f849241648d2c251_JaffaCakes118
-
Size
138KB
-
MD5
4953538ea7d90833f849241648d2c251
-
SHA1
5fe268659ec39d7d6eacb7ff0876e95ec44aca5f
-
SHA256
ef9eacb906781043105adbd90d3f790d696d67d6b7dede1f164d517a0276da64
-
SHA512
d17159ef8e495cf62a96a1c558ca9c3f1d0086ca8bded5124fb41c6fa1e91085d11233e448c79a6bb150ace2503b5bbdde686282bc8b1f33412465950841dba5
-
SSDEEP
3072:VN3TLvt6RI19oGr99XoFuNMI8ycbhsQaUB6CES24T3VmSKcwSonIWBJ2rCKAEtj7:VdLvAIoY99XoUNnbcbWQ3BJ5T3svc3XL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4953538ea7d90833f849241648d2c251_JaffaCakes118
Files
-
4953538ea7d90833f849241648d2c251_JaffaCakes118.exe windows:5 windows x86 arch:x86
569d3b270dbef5f04b2d265caa4194c8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
StrTrimW
UrlGetPartA
kernel32
GetSystemTimeAdjustment
SetCommTimeouts
GetCommConfig
GetTickCount
EnumResourceLanguagesA
TransactNamedPipe
GetUserDefaultUILanguage
comdlg32
ChooseFontW
FindTextW
ChooseColorW
GetOpenFileNameA
user32
ScrollWindow
CharNextW
GetMenuStringA
CopyAcceleratorTableW
ShowWindow
OpenInputDesktop
SendDlgItemMessageA
CreateCursor
AdjustWindowRectEx
GetTopWindow
GetCursorPos
SystemParametersInfoW
SendNotifyMessageW
MonitorFromRect
gdi32
ExtFloodFill
CreateSolidBrush
DPtoLP
Rectangle
CreatePalette
Exports
Exports
?zocehmloxTTFZ__@@YGPAFPAD_N@Z
?aucK_DPVE_BED_CGTM@@YGDIE@Z
?yf_exojcr_v_vlb_tAETJ@@YG_NPAD@Z
Sections
.text Size: 49KB - Virtual size: 209KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idat Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pacdat Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ