R:\jtOhuumsmek\zlVxalduQX\islbaXpTGVldZV.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5ffb69799464014d2d0510749b712469_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5ffb69799464014d2d0510749b712469_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5ffb69799464014d2d0510749b712469_JaffaCakes118
-
Size
221KB
-
MD5
5ffb69799464014d2d0510749b712469
-
SHA1
be060131ac2b2764fe3c254ba9e3ef5bb9a59388
-
SHA256
6b7b237edf5850899379a689f3cf6378dc7f8110520631066b0e60a62e75934d
-
SHA512
ea6b9592fb68775f165be896b502db6cb134e8412b44d3ac25f0e0257b9bca1bc89f22f98d13858025bb866754ffbd0aaee722b9553a73689afed30e21b33bac
-
SSDEEP
3072:wi58VtP6TUqDR2y8nFGXb2fn+etzCZwMyRyJRNy8kihoiJLKEI+K+o2:T06xg5FGXbKnTs3eIs+o2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ffb69799464014d2d0510749b712469_JaffaCakes118
Files
-
5ffb69799464014d2d0510749b712469_JaffaCakes118.exe windows:5 windows x86 arch:x86
512b9b49603f9278371409efa235466c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
memcpy
version
VerQueryValueW
kernel32
GetComputerNameExA
RemoveDirectoryA
GetCommModemStatus
GetOverlappedResult
FindResourceExA
SetSystemTime
TerminateThread
GetExitCodeThread
FileTimeToDosDateTime
GlobalReAlloc
MoveFileExW
lstrlenW
EnumSystemLocalesA
GetFileTime
CreateSemaphoreW
lstrcmpW
GetCommTimeouts
user32
InflateRect
GetClipCursor
GetDlgItemTextA
GetKeyboardLayoutList
RemoveMenu
InsertMenuItemW
SendMessageA
InsertMenuA
EnumChildWindows
OffsetRect
DrawTextExW
CreateMenu
ChildWindowFromPointEx
GetClassNameW
DestroyIcon
EnumWindows
RedrawWindow
ModifyMenuW
GetMessageW
GetMenuItemInfoW
SetClassLongW
DrawIconEx
CharUpperA
SetWindowLongA
DialogBoxIndirectParamA
GetMenuStringW
GetAltTabInfoW
AllowSetForegroundWindow
BeginDeferWindowPos
GetDlgItemTextW
BringWindowToTop
GetDialogBaseUnits
TranslateAcceleratorW
ReplyMessage
CreateDialogParamA
CharNextW
ole32
OleIsRunning
gdi32
CreatePatternBrush
SetBkMode
SetLayout
SelectClipRgn
CreateCompatibleBitmap
GetSystemPaletteEntries
CreatePenIndirect
GetWindowOrgEx
CreateCompatibleDC
ScaleViewportExtEx
CreateDIBitmap
CreateFontA
LineDDA
StretchBlt
SetAbortProc
CreatePen
Exports
Exports
?SDOisioKJS@@YGKEPA_WG@Z
Sections
.text Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.dat_0 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dat_1 Size: 512B - Virtual size: 283B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dat_2 Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dat_3 Size: 512B - Virtual size: 314B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dat_4 Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.debug Size: 512B - Virtual size: 97B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 141KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ