X:\bWxuoopn\smnc\ATtsqrqs.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4ccb92e2efc3f88a0d2ff0468d061991_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4ccb92e2efc3f88a0d2ff0468d061991_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4ccb92e2efc3f88a0d2ff0468d061991_JaffaCakes118
-
Size
173KB
-
MD5
4ccb92e2efc3f88a0d2ff0468d061991
-
SHA1
8d1693c2507ccbdd80505de3ab07a73a1e9aeed4
-
SHA256
0e23b21ed7df339c5c7759a617f8e65b6ab063f6490a47bc4258374eac36ae38
-
SHA512
df0f13c67c9b53111cef3f695d44b4a984ef511ad7bc9c24edc58ec59e8f0331303fe96622ca357fdd11e039197c1e274c9313ba14c00ecf094bbed565758c08
-
SSDEEP
3072:G+4E5vsactI9kIX9w+JTDPIo/WKc9QyGvA61VQxTYhC0J7SdjYgqIpd5:Gyu+JTrIoOL9EbQVl9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ccb92e2efc3f88a0d2ff0468d061991_JaffaCakes118
Files
-
4ccb92e2efc3f88a0d2ff0468d061991_JaffaCakes118.exe windows:5 windows x86 arch:x86
69a542519004d48389e22351366d88bc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
InitCommonControlsEx
ImageList_ReplaceIcon
ImageList_LoadImageW
PropertySheetA
gdi32
GetTextCharsetInfo
OffsetRgn
CreatePatternBrush
GetObjectW
StartDocW
ScaleWindowExtEx
EndPage
GetBitmapBits
SetTextAlign
comdlg32
PageSetupDlgW
FindTextW
GetSaveFileNameA
ReplaceTextW
kernel32
LeaveCriticalSection
LCMapStringA
GetTickCount
GetFileType
GetStartupInfoW
SetFileTime
ConnectNamedPipe
lstrlenW
WinExec
AddAtomA
UnhandledExceptionFilter
UnlockFile
shlwapi
PathRemoveArgsW
PathIsDirectoryW
ChrCmpIA
user32
SetDlgItemTextA
PostMessageW
SetMenuDefaultItem
MapWindowPoints
GetSubMenu
GetForegroundWindow
SetMenuItemBitmaps
CreateDialogIndirectParamW
GrayStringW
DrawStateW
CallWindowProcW
DestroyWindow
GetCursorPos
Exports
Exports
?fWqPJkAsGRuwhmuT@@YGEEM@Z
?HxzdgHlvlgygTHHgZYe@@YGDN@Z
Sections
.itext Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 401KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ