E:\PxxaD\eVDtyku\Pmpp\vfrbiVr\Mwop.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5a5568f626972d591e64e1061f6fb1e0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5a5568f626972d591e64e1061f6fb1e0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5a5568f626972d591e64e1061f6fb1e0_JaffaCakes118
-
Size
53KB
-
MD5
5a5568f626972d591e64e1061f6fb1e0
-
SHA1
118d313b48bc085df21d91a93a0156b005f420d5
-
SHA256
b1ee9cc2f93caffc4876f17acd35e798b4a09eac879a6361ed7b310422c557cc
-
SHA512
8538bf47349c6fd91240ac51007fb9856dd946fa42a3a13a0e521e15beeed723943b5e971c21ac6d57e0860e8a5b10251bbec309f163a6d1fd4b2c928349491a
-
SSDEEP
768:46fVAK2hLxC+OmPNw19Kc88P5hUbYAuCKzVHWFd3kzV/SdP3Ny89M2d95lp+JkcL:4VK2BNq9KclTAu/xWr34/2Fy8LDSJXLb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a5568f626972d591e64e1061f6fb1e0_JaffaCakes118
Files
-
5a5568f626972d591e64e1061f6fb1e0_JaffaCakes118.exe windows:5 windows x86 arch:x86
1ed53d227d9c405b89d0411357bc85c4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
ScaleWindowExtEx
CreateFontIndirectW
DeleteObject
CreatePen
SetMapMode
CreateDIBitmap
GetTextMetricsW
shlwapi
PathGetArgsA
user32
GetAsyncKeyState
AdjustWindowRectEx
CharPrevA
SendDlgItemMessageW
InvertRect
SetTimer
GetCaretPos
DrawTextExW
GetForegroundWindow
GetWindowRect
SetPropW
IsCharAlphaW
wsprintfA
IsWindowEnabled
kernel32
LocalSize
HeapWalk
lstrcmpiA
InterlockedExchange
lstrcmpA
UnlockFile
RemoveDirectoryW
GetComputerNameExW
GlobalUnlock
LoadLibraryExW
GlobalAddAtomW
SleepEx
GetCommTimeouts
Exports
Exports
?ysQrqjtgjatfqGwgcciY@@YGEPAG@Z
?iCeTmilzqmCz@@YGEPANN@Z
?zKAzwbvr@@YGXPAE@Z
?bfdoqgtjeubDdbPwhrvzf@@YGXHE@Z
?kzkwtcN@@YGKPAG@Z
?nKaaBLqgvggmoKxIb@@YGDPAK@Z
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 198KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ