S:\giecmAi\UyEruT\wqvhIzVa\qmDKD\lrLhlcR.pdb
Static task
static1
Behavioral task
behavioral1
Sample
64fe849643784c2699b572baaae5f7d6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
64fe849643784c2699b572baaae5f7d6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
64fe849643784c2699b572baaae5f7d6_JaffaCakes118
-
Size
221KB
-
MD5
64fe849643784c2699b572baaae5f7d6
-
SHA1
20b1c43799cc6fdc56c3f3f2c02f9585d8c1eef1
-
SHA256
88a5c50d64982f35d7e78f85198fe841d35434c19ea3d59f4d4364a81ab8cc75
-
SHA512
eb1973e5fbb60ae3b85f6e3897dd91fd97d8f9a4747af8a1bc834105006159b203db4b429db0e70cd5456d2528963827aef9c8356af377a9fdc5c3551a3a4027
-
SSDEEP
6144:xim1eIFWQtFV8Ik/6Iavnm/AE5UP3ExpwbrnkkH:Qm1eI0Cre6xm/+3EwbTk2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64fe849643784c2699b572baaae5f7d6_JaffaCakes118
Files
-
64fe849643784c2699b572baaae5f7d6_JaffaCakes118.exe windows:5 windows x86 arch:x86
233b51077204b0f488ad6648957a2e77
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
DefDlgProcW
InvertRect
OpenIcon
LoadBitmapA
ReplyMessage
WindowFromPoint
SetScrollInfo
OemToCharBuffA
IsCharLowerW
MonitorFromRect
TrackPopupMenu
DrawCaption
gdi32
PatBlt
ExtTextOutA
CreateDiscardableBitmap
CreatePalette
SetViewportExtEx
shlwapi
PathFindExtensionA
kernel32
lstrcatA
GetCurrentProcessId
GetWindowsDirectoryW
FindResourceExW
IsValidLanguageGroup
SetCurrentDirectoryW
GlobalAddAtomA
GetCurrentProcess
comdlg32
ReplaceTextW
PrintDlgW
CommDlgExtendedError
GetOpenFileNameW
comctl32
ImageList_AddMasked
ImageList_Create
ImageList_GetIcon
Exports
Exports
?COWkGRAjx__@@YGJI@Z
?vpLVV_DS@@YGMEM@Z
?MJTNHRg_ajze_KZ_PP@@YGJPAIF@Z
?I_FTIRZw_ir_HICy_@@YGPAEPAED@Z
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 440B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA1 Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA2 Size: 77KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ