N:\kufu\ghRtFCxR\vfcntw\yLZtp\gcrQdd.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5e36d2f01095bfabfecd546231f6bf8b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5e36d2f01095bfabfecd546231f6bf8b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
5e36d2f01095bfabfecd546231f6bf8b_JaffaCakes118
-
Size
189KB
-
MD5
5e36d2f01095bfabfecd546231f6bf8b
-
SHA1
3958a8fc01e9a46fd1e12ee3df5ea5bbf39f28d7
-
SHA256
6a3dc363d1ef3641e49b706c03d23436593f35c8050b4615f4fb31cce0553187
-
SHA512
bb26e90d28729be7009f5b25c7d77604c4e6a9c0506545f8fb5256476bf0f67112e4148cf916ef514eb01cbf8bd8029b4e51786de8bd4f8e6fcb61861b3c5736
-
SSDEEP
3072:yr+hVOifUJ92ADwP+OT23hp4NqSIhlJVqUsXpYWF64qGjybp025:S+3OwUL2AUm2Nq7hRzs5YW64qGjybp02
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e36d2f01095bfabfecd546231f6bf8b_JaffaCakes118
Files
-
5e36d2f01095bfabfecd546231f6bf8b_JaffaCakes118.exe windows:5 windows x86 arch:x86
feb0f0db9d44d165e3d194b1ece6ba42
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comdlg32
ChooseFontW
GetOpenFileNameA
FindTextW
gdi32
GetTextExtentExPointW
GetTextAlign
OffsetRgn
SelectObject
GetROP2
CreateDiscardableBitmap
kernel32
GetNumberFormatA
GlobalAlloc
GlobalUnlock
GetSystemDirectoryA
WriteFile
SetSystemTime
lstrcmpiW
GetModuleHandleW
ConvertDefaultLocale
GetProcAddress
GetTimeFormatA
lstrlenW
lstrcmpiA
user32
GetScrollPos
LoadCursorW
LoadIconW
GetSystemMetrics
IsDlgButtonChecked
GetWindow
LoadBitmapA
CreateCursor
GetDlgItemTextW
GetMonitorInfoW
SetDlgItemInt
GetClassLongW
comctl32
InitCommonControlsEx
ImageList_Write
ntdll
_aullrem
Exports
Exports
?zihppghkbF@@YGPAXJPAK@Z
?SaOemxehuFFZwjsvuq@@YGPAXJH@Z
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 142KB - Virtual size: 210KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 133B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.crt Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ