C:\tuMeW\hNNgdBnq\CzJD.pdb
Static task
static1
Behavioral task
behavioral1
Sample
64c0631fc029628413a03717db472226_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
64c0631fc029628413a03717db472226_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
64c0631fc029628413a03717db472226_JaffaCakes118
-
Size
178KB
-
MD5
64c0631fc029628413a03717db472226
-
SHA1
b341d68d13ea4b9848161fce40b03ec8e07d29cc
-
SHA256
12590feaf9d3cf51140487a2de31c1c835395382338bb443814c236e870f82c1
-
SHA512
2ca39c23084e195eb24239da904d7d898fc78beec0addd94f0c46d9dfb3f904b15d2cd03ed65c78ddc2f060c6d891fe96b88381964ae16cceb8f885f7db4b668
-
SSDEEP
3072:ji5YzAge8sX0bf6RqkD2PLh/mBLiJiRJ1dYTT7Lt6YM:488Ef6RqU2PLoBLi0RJ1dYTfLkY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64c0631fc029628413a03717db472226_JaffaCakes118
Files
-
64c0631fc029628413a03717db472226_JaffaCakes118.exe windows:5 windows x86 arch:x86
a9f7947ea62322c0e304162a731fd0d0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
CreateRoundRectRgn
EndDoc
GetTextMetricsW
LPtoDP
CreatePen
IntersectClipRect
CreateBitmap
CreateBrushIndirect
GetDIBits
kernel32
VirtualQuery
TlsFree
GetTickCount
GetSystemDefaultLCID
lstrlenW
lstrcmpW
IsDBCSLeadByteEx
GetCompressedFileSizeW
GetModuleHandleW
GetProcAddress
SetThreadAffinityMask
HeapDestroy
user32
GetMenuStringW
SetScrollPos
CharUpperW
GetKeyboardLayoutList
IsWindowUnicode
LoadCursorW
GetDlgItem
CreateMenu
ShowOwnedPopups
SendNotifyMessageW
GetProcessDefaultLayout
GetForegroundWindow
Exports
Exports
?bluewelukQvmHfiAtk@@YGPAKG@Z
?dywxcCawvwXizr@@YGPADPAD@Z
?mriqjzhhUtl@@YGPAKPAGJ@Z
?ddJjpVVofm@@YGMG@Z
?FhLYajbyomAMvOWXvLR@@YGDPAMPAF@Z
?lnLbdxNNhdNmvgzgWK@@YGFFD@Z
?ByDzUfgebWyiusxJiyE@@YGNIPAJ@Z
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 326B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 149KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ