I:\NuOe\wNGwHz\BkiR\yfow\ldbilXc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4cd6d40cc25c52bdf13afd221fe88da8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4cd6d40cc25c52bdf13afd221fe88da8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4cd6d40cc25c52bdf13afd221fe88da8_JaffaCakes118
-
Size
123KB
-
MD5
4cd6d40cc25c52bdf13afd221fe88da8
-
SHA1
ccadbc7473d7a0f9a811341daea406e3166d1a59
-
SHA256
c2c739b680f6c68ad451bf6dcddf7090646493dd02098e42f5a11bbf0b2fab25
-
SHA512
5a8cf7c6361466485d1075e4b833b459f04e72e85db5ac77adcea5d56ea01f27c7124b69dcfcaf805a1db490f39ac9ac2da1a9d5f95d96ba9ef7f94832aa9e0c
-
SSDEEP
3072:Ft4GSkFRvqs4y1VbHD+nReYJDy3s254MISgTuby:FXhvTDbHD+nReMDT25TIS52
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4cd6d40cc25c52bdf13afd221fe88da8_JaffaCakes118
Files
-
4cd6d40cc25c52bdf13afd221fe88da8_JaffaCakes118.exe windows:5 windows x86 arch:x86
19b5b5f4aa97d93addf62e7ad7fd73cd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
ImageList_AddMasked
DestroyPropertySheetPage
gdi32
CreateCompatibleDC
SetPaletteEntries
GetTextExtentPoint32A
BeginPath
MoveToEx
ScaleWindowExtEx
kernel32
AddAtomA
LocalReAlloc
LoadResource
ExitProcess
lstrcmpiA
FreeResource
lstrcpyW
lstrcmpiW
GetStringTypeExW
CreatePipe
user32
BringWindowToTop
ClipCursor
LoadMenuA
CharNextA
ShowCaret
GetSysColor
GetAsyncKeyState
CharUpperBuffW
SetScrollInfo
SetScrollPos
PostMessageA
GetMenuItemRect
DeleteMenu
InvertRect
shlwapi
StrCpyW
StrToIntA
UrlGetPartW
Exports
Exports
?_E__bsa_gwf_k@@YGFEH@Z
?rjzKZ_HVIlxvb_X@@YGPAJG@Z
?rplptjdyodBMC@@YGJPAI@Z
?Y_W_QYND@@YGIJ@Z
Sections
.text Size: 51KB - Virtual size: 174KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pacdat Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idat Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ