R:\OzWut\mkivaVyb\igvkw.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5e1b8f707ec51baeda3a2baa15261a01_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5e1b8f707ec51baeda3a2baa15261a01_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e1b8f707ec51baeda3a2baa15261a01_JaffaCakes118
-
Size
112KB
-
MD5
5e1b8f707ec51baeda3a2baa15261a01
-
SHA1
4215e65549bb7cdc6a3fe10a51b565d223f54d1d
-
SHA256
1a58d5c41dc2d85774d19cbe20c9fde43eba9eed902dccd20fe98904f43b6584
-
SHA512
3d6e73a8431257bd957e10aa85bd78145f30a4fe7a4134d1998f7f8b7833c5f34b039767d2570c82be61f3eb7c39c4cab8fbf4a32d752cff77e05b7017dacdac
-
SSDEEP
3072:2oIrkHvKVtQhY143kH6NDZUbH6EZqBgHfkQz/bGDH1/:MwPIr4UaFvofkabMV/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e1b8f707ec51baeda3a2baa15261a01_JaffaCakes118
Files
-
5e1b8f707ec51baeda3a2baa15261a01_JaffaCakes118.exe windows:5 windows x86 arch:x86
686130434eab75076bd86ca5c24f6cce
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
CreatePropertySheetPageA
CreateStatusWindowW
ImageList_Read
CreatePropertySheetPageW
gdi32
TranslateCharsetInfo
CreateFontIndirectA
SetBkColor
CreatePatternBrush
GetDeviceCaps
SetTextColor
GetRgnBox
user32
CreateCaret
GetWindow
CheckMenuItem
GetWindowTextW
ScrollWindowEx
GetNextDlgGroupItem
GetWindowLongW
InvalidateRect
ValidateRect
GetPropA
ShowScrollBar
CharNextExA
GetWindowTextLengthW
comdlg32
GetSaveFileNameA
GetFileTitleW
PageSetupDlgW
kernel32
LoadLibraryW
SetMailslotInfo
GetTempFileNameW
GetProcAddress
SetCurrentDirectoryA
GlobalSize
lstrcmpiW
GetFileAttributesA
FreeResource
GetVersionExW
ConnectNamedPipe
TlsGetValue
Sleep
Exports
Exports
?drehyylhztdozutYwcb@@YGDM@Z
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.crt Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ