T:\UjbmWDr\sUbhjj\vhaXTcvx.pdb
Static task
static1
Behavioral task
behavioral1
Sample
668ead8f1d20f879c337fec48bca6c45_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
668ead8f1d20f879c337fec48bca6c45_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
668ead8f1d20f879c337fec48bca6c45_JaffaCakes118
-
Size
110KB
-
MD5
668ead8f1d20f879c337fec48bca6c45
-
SHA1
bbbc9d3dc2d595168ed184b32a7f4b86765a4b0a
-
SHA256
6d7e5c3c767cdf124f6ca55ec5b6e10220def6f3fae4faa2690745b1d5ebd3c8
-
SHA512
fbba937a485db7cd4ff028abb4134c0a75bfe86c2fdc3dd0e8a1d6e8eec88536c98b833fd69207b416307244590179007d1cc268b794025e1fa7d36f6eb1f051
-
SSDEEP
3072:0uaC1fiONMxR+sS2xp1eCc+qjO+r2AGNh3I:0utIONolxHqK+q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 668ead8f1d20f879c337fec48bca6c45_JaffaCakes118
Files
-
668ead8f1d20f879c337fec48bca6c45_JaffaCakes118.exe windows:5 windows x86 arch:x86
3397ade0f5b9ecec03710e9f4b480b0d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
CreateEllipticRgnIndirect
GetTextAlign
StartDocW
EndDoc
CreateFontW
FillRgn
GetTextExtentPointA
GetFontData
CreatePalette
shlwapi
StrCmpNW
comdlg32
PrintDlgExW
FindTextW
user32
SetWindowPlacement
wvsprintfW
IsCharUpperA
ShowScrollBar
GetKeyState
GetDialogBaseUnits
ClientToScreen
GetPropW
GetUpdateRect
GetWindowLongW
GetClassNameW
CharLowerW
kernel32
FindFirstFileW
GlobalFree
GetBinaryTypeA
LocalSize
VirtualAlloc
lstrcmpiW
LoadLibraryW
LockFile
GetProcAddress
FindNextFileW
SetTimerQueueTimer
lstrlenW
Exports
Exports
?ziQebagwgwqFhiqiwuZqm@@YGPAXPAEJ@Z
?lsalvxeAiznftKtrqTuiOg@@YGJE@Z
?Qjuywbarylxw@@YGJFPAD@Z
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 942B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ