X:\gzdgby\jXtLSnr\kEHa\lNbwUv.pdb
Static task
static1
Behavioral task
behavioral1
Sample
64f25e2f38ae1850b2e8e79e0281c18e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
64f25e2f38ae1850b2e8e79e0281c18e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
64f25e2f38ae1850b2e8e79e0281c18e_JaffaCakes118
-
Size
123KB
-
MD5
64f25e2f38ae1850b2e8e79e0281c18e
-
SHA1
f5b21221909ee649df8c99b4694b87124e534480
-
SHA256
9a780f5258e35cb6e8d16e9bc908602ba4691a2cef2f4bca5d43864ad904833e
-
SHA512
f3be3689f09877794df44e5d7bc393be12525d75b58b7d4e35f9608c3a1b385393459be1f0d90b6c0f47c4324541d453f0730c5b2b3ed3f7327e8873b268ae44
-
SSDEEP
3072:sasSrToUofkMbDi31Y1VYa0/RXYoHE1fK4w:/sgTzOkMbDiFY1VYDnHE1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64f25e2f38ae1850b2e8e79e0281c18e_JaffaCakes118
Files
-
64f25e2f38ae1850b2e8e79e0281c18e_JaffaCakes118.exe windows:5 windows x86 arch:x86
cb8885eb8cb511ca49099ea086f70d55
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
IsBadReadPtr
GetComputerNameExA
LockResource
CreateFileMappingA
LoadLibraryA
GetLocaleInfoA
UnlockFile
FreeResource
GetHandleInformation
SetCommBreak
lstrlenA
GlobalAlloc
LocalReAlloc
SetMailslotInfo
user32
GetDC
LoadAcceleratorsW
GetWindowTextLengthW
SetCursorPos
SetClassLongW
GetWindowTextLengthA
LoadMenuW
GrayStringW
DrawTextW
GetClassNameW
wsprintfW
SendMessageTimeoutW
MessageBoxExW
shlwapi
StrCmpNIA
gdi32
ScaleWindowExtEx
ExtTextOutA
PathToRegion
GetTextCharsetInfo
SetTextAlign
BitBlt
CreateFontIndirectA
Exports
Exports
?OkLzqRgquBspkjl@@YGXPAHPAK@Z
?pooGbuGSJych@@YGIPAK@Z
?zfzqebHcXmYbgvqeyaaq@@YGPAXJ@Z
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ