W:\egRovxDE\ZtnpvWsv\lVvcpt\jZfgEu\HWKeuJ.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5d7ec07fb460f60bd966b5ac07755086_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5d7ec07fb460f60bd966b5ac07755086_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5d7ec07fb460f60bd966b5ac07755086_JaffaCakes118
-
Size
112KB
-
MD5
5d7ec07fb460f60bd966b5ac07755086
-
SHA1
1c5dd22e354faa6e8307e45d8af81eb050e6d48c
-
SHA256
c45f0d0e32ea640fd1cff243e51fe2b8a0c9d98dc3466faff9305770c091919e
-
SHA512
373c8915370a206ac54a03ab2412ac488612e7bb8795b8d055c45bd59c8e7c7105b362b68a65b0b9026680cda4937fcdad892099a0188d10256bab8e72a88530
-
SSDEEP
3072:2pRaONkUi1Dyb9KSxKju80zGFUAOsifGm1MugfV4jG4:2HHNwDKES0O4UdsFT4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d7ec07fb460f60bd966b5ac07755086_JaffaCakes118
Files
-
5d7ec07fb460f60bd966b5ac07755086_JaffaCakes118.exe windows:5 windows x86 arch:x86
2c0f6fc87cc250a1db29bbef9aef71de
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
StrCmpNW
kernel32
lstrcatA
SystemTimeToFileTime
GetProcAddress
lstrlenW
LoadLibraryW
EnumSystemLocalesA
OpenFile
SetCurrentDirectoryW
CopyFileA
CreateEventA
GetSystemTimeAdjustment
lstrcmpiW
user32
GetPropW
GetClientRect
RegisterClassW
IsCharUpperA
FrameRect
InflateRect
GetClassInfoW
OpenIcon
SetScrollInfo
GetWindowLongW
ShowScrollBar
CreateWindowExA
gdi32
GetDIBits
SetBitmapBits
GetTextMetricsA
GetBitmapBits
PolyBezier
WidenPath
GetNearestColor
DPtoLP
PatBlt
Exports
Exports
?boptypfjtafxe@@YGXMK@Z
?xfXeYrrghrds@@YGPAXNK@Z
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 860B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ