W:\qRclxqU\dEIEvQ\oTkRGn\rhdas\rLFFbdO.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5df7ee626081365852237f620fa6e54e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5df7ee626081365852237f620fa6e54e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5df7ee626081365852237f620fa6e54e_JaffaCakes118
-
Size
109KB
-
MD5
5df7ee626081365852237f620fa6e54e
-
SHA1
d80b94653495a81b53fdda84c5e3efd5dd9d55f2
-
SHA256
365c2fd2aebbcb0e1067a2b5b192f916cc26bd74d0743f6c2bd8944f164ab7eb
-
SHA512
100353f750c421544f4d93b437931441b02b4932509764d1007fc8ea0faa301167c35fe7025a01f1ec98f05d18f473e9026f11cdf03900a1360259eab7b1ba0d
-
SSDEEP
3072:6hcGPbZZXBclFWY6AwwqmR9yThGr0SF1HsBiOCm0:61bWKOqmRqGr0cRzX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5df7ee626081365852237f620fa6e54e_JaffaCakes118
Files
-
5df7ee626081365852237f620fa6e54e_JaffaCakes118.exe windows:5 windows x86 arch:x86
488998e2dc3c6c3e485b77b6ec6bf591
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
StrCmpNW
user32
OpenDesktopW
GetWindowLongW
IsCharUpperA
GetDlgItemTextA
GetPropW
ClientToScreen
LoadStringW
MoveWindow
ShowScrollBar
CharUpperA
EnumThreadWindows
gdi32
RemoveFontResourceW
GetTextMetricsA
GetBkMode
CreateHalftonePalette
StartDocW
IntersectClipRect
Polyline
kernel32
CreateNamedPipeA
VirtualFree
LoadLibraryW
GlobalCompact
lstrcpynW
lstrlenW
GetModuleFileNameA
lstrcmpiW
SetThreadLocale
GetProcAddress
GetShortPathNameA
GetStringTypeExW
Exports
Exports
?pzUxmgxinpvShwZQAlwmd@@YGEE@Z
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 828B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 98B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ