P:\ncFx\TzkQBRWM\Xazk.pdb
Static task
static1
Behavioral task
behavioral1
Sample
62b3a7ce04fc7094ceff95ba25277140_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
62b3a7ce04fc7094ceff95ba25277140_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
62b3a7ce04fc7094ceff95ba25277140_JaffaCakes118
-
Size
111KB
-
MD5
62b3a7ce04fc7094ceff95ba25277140
-
SHA1
c070f31edb3a91b3ec536db112ef1ec36ac3f726
-
SHA256
5361d5bc0aa95946bd193eac3765d74130b3a897b31806fa27ce02a45c71dc1c
-
SHA512
23e6873e6bed0b7427ccbd4fe08375d36f3b3c578c5f839dacd9ee8071078bc81d2ec73a2ac79c7d172cdf7c708710437415bf09f59c639b8d8b9f32925400fe
-
SSDEEP
3072:pd8L3R9DiS4Tbl5qZIVsKl+Ung5Tgz16yHWc28nj:paHwncUgFgZ28
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62b3a7ce04fc7094ceff95ba25277140_JaffaCakes118
Files
-
62b3a7ce04fc7094ceff95ba25277140_JaffaCakes118.exe windows:5 windows x86 arch:x86
c84dddb225f1dadc5b60a7528c844b80
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
BitBlt
ExtFloodFill
PathToRegion
StretchBlt
CreateCompatibleDC
GetDeviceCaps
Polyline
SetBkMode
shlwapi
StrCmpNA
kernel32
SetPriorityClass
lstrlenA
LoadLibraryW
GetModuleHandleA
lstrcmpiW
GetProcAddress
IsDBCSLeadByteEx
IsBadStringPtrW
MoveFileA
LCMapStringA
SetEndOfFile
GetStdHandle
CreateEventA
CompareStringA
user32
CreatePopupMenu
DrawIconEx
LoadImageA
GetWindowLongW
GetMenuItemID
ActivateKeyboardLayout
EnumChildWindows
OffsetRect
ShowScrollBar
GetDlgItemTextA
RegisterClassExW
MonitorFromPoint
CopyImage
GetPropW
Exports
Exports
?SludEtyhr@@YGGE@Z
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 86B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ