F:\JcHzY\gzrHF\voqBrco\ssabbf\TfVmp.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5e0377aba93e35d7440eb819abb9bf9d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5e0377aba93e35d7440eb819abb9bf9d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e0377aba93e35d7440eb819abb9bf9d_JaffaCakes118
-
Size
111KB
-
MD5
5e0377aba93e35d7440eb819abb9bf9d
-
SHA1
7de4a13484f28bd5a853bc8fb1ab54092656510a
-
SHA256
4082aeff1de39e80dc1d2101cca179cc7901456751b206e3daa13b7b9a5328bd
-
SHA512
e84b6d4a158e16cfd9579251a40d52c8a0bd1fb7df8f08d9ce7a4e2b1c74fdd006ac321603f149beaacd376175a679ed4e2a20df10c3ceffb4a3c61d901e8597
-
SSDEEP
1536:/lIv2wj46g3ae63PBxKT0b4IGa5dxm6bb/i+mJGHB4B3lzkEFYa6OS6T4:Clj44eQBx5XGaVmEDi+mJGHB4zt/p4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e0377aba93e35d7440eb819abb9bf9d_JaffaCakes118
Files
-
5e0377aba93e35d7440eb819abb9bf9d_JaffaCakes118.exe windows:5 windows x86 arch:x86
0b82fd99f606343646123d9083e27b9a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
LockResource
GetProcAddress
WaitCommEvent
SetCurrentDirectoryA
GetModuleFileNameA
CreatePipe
DeleteCriticalSection
CreateEventA
HeapLock
lstrcmpiW
LocalSize
LoadLibraryW
GetTickCount
gdi32
Polygon
CreateEllipticRgnIndirect
GetPaletteEntries
SetDIBits
GetFontData
OffsetRgn
SetAbortProc
CreateCompatibleBitmap
TextOutA
user32
EnableMenuItem
GetWindowLongW
GetLastActivePopup
ReplyMessage
GetClassInfoW
ShowScrollBar
GetWindow
DefWindowProcA
IsCharAlphaNumericW
MessageBoxExW
AdjustWindowRect
CharNextW
GetPropA
Exports
Exports
?xhhnWLBUogiaGlfRv@@YGPAGPAHPAK@Z
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 101B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.crt Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ