B:\nptrHFsE\ykFohRl\Ozky\tjgxjmtc\SkHRowXp.pdb
Static task
static1
Behavioral task
behavioral1
Sample
60aeee0f80f131c408d438109b7de157_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
60aeee0f80f131c408d438109b7de157_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
60aeee0f80f131c408d438109b7de157_JaffaCakes118
-
Size
114KB
-
MD5
60aeee0f80f131c408d438109b7de157
-
SHA1
d9016a1d42efff77a3ee469416d610a06f832fcb
-
SHA256
317a4f388d7e7f4ae6680330542ce0b1fe771edceaa0f613dafd51e5c9985ee1
-
SHA512
3669e41affb4fc80fe5757d943ae3f2efe74c46333687e3524840073585bd3a73ac0409087786c55104f63c0adedfe6b21c5adbc6ed8cbdc473eaf05011542be
-
SSDEEP
3072:ElHSvv+Y6lxpI6/Q962f6aq1EHE8nEl2K:EpZY7626CaqXZK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60aeee0f80f131c408d438109b7de157_JaffaCakes118
Files
-
60aeee0f80f131c408d438109b7de157_JaffaCakes118.exe windows:5 windows x86 arch:x86
1fa970501084dfbb32e9a49d72ad16f9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetLocalTime
GlobalCompact
CreateSemaphoreA
GetSystemWindowsDirectoryA
GetLocaleInfoA
FoldStringW
OpenEventW
HeapValidate
HeapReAlloc
GetDateFormatW
ResumeThread
user32
GetMenuStringW
DestroyAcceleratorTable
GetWindowLongW
ShowWindow
SetLastErrorEx
GetDoubleClickTime
CreateAcceleratorTableW
LoadCursorA
GetKeyNameTextW
CharNextA
ShowOwnedPopups
GetDlgItemTextA
comdlg32
CommDlgExtendedError
GetSaveFileNameW
GetOpenFileNameW
comctl32
ImageList_Write
ImageList_GetIcon
ImageList_GetIconSize
gdi32
SetDIBitsToDevice
PolyBezier
DeleteDC
CreateHatchBrush
GetLayout
StartDocW
GetStockObject
Exports
Exports
?Ujvuauwwogclti@@YGXJJ@Z
?xhNeijdIzos@@YGPANPAMI@Z
Sections
.text Size: 1024B - Virtual size: 865B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 736B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ