V:\nlbncg\tsbpXi\zLjlU.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6779340172ebb4aa7dc34b5be07fb301_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6779340172ebb4aa7dc34b5be07fb301_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6779340172ebb4aa7dc34b5be07fb301_JaffaCakes118
-
Size
112KB
-
MD5
6779340172ebb4aa7dc34b5be07fb301
-
SHA1
ed68f809e4f694b24d3cfdfb441cc6b97d4260b7
-
SHA256
34fab7abbdfed829e920259e0a238bf92ea15311e0b82e8b2722514448bf7ceb
-
SHA512
1b3137f94787677ff732b60063c3305b549d4ae5d6b1ac1a95d628601c16c744c853b486df928fbc8ba70f5f166e6eb3d1f10e7f0193d910fb0e370f7cef8098
-
SSDEEP
1536:Je4+OUJ00c0f6Z9PMXbTVkZKP/QRFExd7dcPPHWPAHjSpMv9nAgud9:JBUJ0X4yyXH0KP/Qo0P2YHGG5ub
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6779340172ebb4aa7dc34b5be07fb301_JaffaCakes118
Files
-
6779340172ebb4aa7dc34b5be07fb301_JaffaCakes118.exe windows:5 windows x86 arch:x86
0bdef3150532fd0abf4ba13eb9de295d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comdlg32
PrintDlgW
CommDlgExtendedError
GetSaveFileNameW
kernel32
EnterCriticalSection
TlsGetValue
SuspendThread
OpenEventA
lstrcmpiW
DeleteAtom
GetSystemTimeAdjustment
GetProcAddress
SetCommBreak
LoadLibraryW
HeapCreate
lstrlenW
gdi32
CreatePenIndirect
CreateSolidBrush
PatBlt
CreateFontIndirectA
EndPath
BitBlt
GetPaletteEntries
BeginPath
GetNearestPaletteIndex
user32
GetWindowLongW
ActivateKeyboardLayout
ShowCursor
FindWindowA
SetSysColors
SetScrollInfo
ShowScrollBar
IsCharUpperA
PostThreadMessageW
GetSystemMenu
OpenIcon
InsertMenuA
GetPropW
shlwapi
StrCmpNW
Exports
Exports
?pVpJfuggiXyDpwmTszw@@YGIPAM@Z
?VVpvPtljxgHlxfSvlr@@YGPAHJ@Z
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 1010B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 138B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ