N:\zKrv\hXvAv\IslIm\CtQlgg.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5cfd450e9381ebb05664d7fdfe1198af_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5cfd450e9381ebb05664d7fdfe1198af_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5cfd450e9381ebb05664d7fdfe1198af_JaffaCakes118
-
Size
105KB
-
MD5
5cfd450e9381ebb05664d7fdfe1198af
-
SHA1
97ec763aa1e6ca0767ab6be9353fff9d36d2ef8a
-
SHA256
f317cdbcb6b6ee0f6317f2cc35da19172dbf2147664de1f95b9e0f7cfdcfbef3
-
SHA512
55d9f6a1f4fbab64029d8f44ccf91a05cc5b90884d87ea5394288a507bdcaa95b908fda043058146b9fa9c772ae55c1b1544344e079f12be22046fb2b98a27ef
-
SSDEEP
3072:cy5+zVmysqGjqUE15eRJr/AA0Z1vce0uyXnEyH:Eky3UE1IrsAPe0BE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5cfd450e9381ebb05664d7fdfe1198af_JaffaCakes118
Files
-
5cfd450e9381ebb05664d7fdfe1198af_JaffaCakes118.exe windows:5 windows x86 arch:x86
234f39fd240fb050aa4582c1eda9a11e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
StrCmpNA
kernel32
SetFileTime
UnlockFile
lstrlenA
LoadLibraryExA
WaitCommEvent
GetComputerNameExA
ReleaseSemaphore
SystemTimeToFileTime
GlobalUnlock
lstrcpyW
GetVersionExA
lstrcmpiA
GetStartupInfoA
IsDBCSLeadByte
comdlg32
GetFileTitleW
PrintDlgW
ChooseColorW
comctl32
InitCommonControlsEx
PropertySheetA
PropertySheetW
gdi32
GetBkMode
ScaleWindowExtEx
Polygon
GetFontData
PathToRegion
StretchBlt
BitBlt
RealizePalette
user32
WaitForInputIdle
GetDlgItemTextW
TranslateAcceleratorA
AttachThreadInput
ShowScrollBar
CharUpperBuffW
IsCharAlphaW
GetDoubleClickTime
DrawTextA
GetPropW
CharPrevW
GetClassWord
SendDlgItemMessageW
Exports
Exports
?ypaZgtIhwlwZqe@@YGGGF@Z
?ffIizXfgwujdObgbz@@YGPAD_N@Z
?qOtByVxumlp@@YGEH@Z
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 163B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ