R:\JtDNnJu\miilrsuiUaMHde\mmdocbpcHwa.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4a6b9715d28b04a216e1b93dac7d9f31_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4a6b9715d28b04a216e1b93dac7d9f31_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a6b9715d28b04a216e1b93dac7d9f31_JaffaCakes118
-
Size
139KB
-
MD5
4a6b9715d28b04a216e1b93dac7d9f31
-
SHA1
6fed52b8c98838f1562f9a826e2dd72a82f1ab42
-
SHA256
02438d1e4a9e9980a1dad9e3b42dbe09cd0a35674d33ff605e39058881c46800
-
SHA512
96bae466a932f7f72fd71acbd5fc4b66f6bb6379e6cb5bf8d96cdd55732ae68c0d22106f49c2180b31e910439447adba1ed4a7a0228868305cb82e1ba61b689e
-
SSDEEP
3072:ecfPxA0mKJ5Yb7v5IyX8yw+7kARVMI+c/aY67mDGgjKp9I8L:5n6JKJeb7k+7Nz+cw7qWp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a6b9715d28b04a216e1b93dac7d9f31_JaffaCakes118
Files
-
4a6b9715d28b04a216e1b93dac7d9f31_JaffaCakes118.exe windows:5 windows x86 arch:x86
a71b551cc95df7c2d6c1da3ae3664b78
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
exit
user32
ToUnicodeEx
CreateDialogIndirectParamW
CascadeWindows
GetDlgCtrlID
DispatchMessageW
CharLowerBuffW
CreateIconFromResource
MapVirtualKeyExW
CharLowerW
RemoveMenu
IsDlgButtonChecked
SetPropW
OpenIcon
SetScrollPos
GetWindowDC
CreateWindowExA
ActivateKeyboardLayout
SetWindowPos
DrawMenuBar
LoadAcceleratorsW
GetDlgItemTextA
DeferWindowPos
CreateAcceleratorTableW
RegisterHotKey
AllowSetForegroundWindow
CreateIconIndirect
GetMessageA
FindWindowW
GetClassInfoExW
kernel32
LoadLibraryA
SetFilePointer
ExitProcess
lstrcatW
MoveFileA
OpenEventA
GetCurrentThread
GetTickCount
GetModuleFileNameW
ReleaseSemaphore
LoadLibraryW
CreateDirectoryA
TlsSetValue
IsBadStringPtrW
GetCommandLineW
FlushViewOfFile
shlwapi
UrlGetLocationA
gdi32
GetClipBox
GetDIBColorTable
GetDIBits
EndPath
GetBkMode
CreateHatchBrush
RoundRect
DeleteObject
GetTextExtentPointA
SetWindowOrgEx
CreateCompatibleDC
GetCurrentObject
CreateFontW
Exports
Exports
?_nJFL___YD_u_i**YGKD_N@Z
Sections
.text Size: 115KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 512B - Virtual size: 260B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.form1 Size: 512B - Virtual size: 108B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.form2 Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.form3 Size: 512B - Virtual size: 495B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.form4 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.info Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ