R:\jcBte\dGYz\udarfsh\Gcvkccc\ijlSJ.pdb
Static task
static1
Behavioral task
behavioral1
Sample
68311aa2fc6a50e0c2638fe236839ef1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
68311aa2fc6a50e0c2638fe236839ef1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
68311aa2fc6a50e0c2638fe236839ef1_JaffaCakes118
-
Size
145KB
-
MD5
68311aa2fc6a50e0c2638fe236839ef1
-
SHA1
be7a392491d2eea95f83c3083294f13313669c00
-
SHA256
7a772bf9c2521ddaaffebf2038e5a423daba60381c308ca5ddf937604dc8477a
-
SHA512
894e23b3ee99a21760db3028c423904501f2406084f9f41e2861397ea9104d67890ba2eda30d95a58053ac189fd14b23bdaf9022a969995b4a40bf3a9ec156b4
-
SSDEEP
3072:+T3LDvRNl/kxRM9B2PSOJHVq61dewszl9ZiXuB3wslNMR8z:+T7DvF8xyyAgFszzwu9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68311aa2fc6a50e0c2638fe236839ef1_JaffaCakes118
Files
-
68311aa2fc6a50e0c2638fe236839ef1_JaffaCakes118.exe windows:5 windows x86 arch:x86
177eb84f30ae45ae2984480ede6442a6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
ImageList_AddMasked
ImageList_GetIconSize
ImageList_GetImageCount
CreateStatusWindowW
ntdll
wcslen
user32
AdjustWindowRectEx
LoadAcceleratorsA
GetKeyboardLayout
SetSysColors
WaitMessage
GetSysColor
GetDialogBaseUnits
GetNextDlgTabItem
SendDlgItemMessageW
SetWindowTextA
GetClassInfoW
CloseDesktop
TileWindows
CreateCursor
kernel32
GlobalCompact
GetCurrentProcessId
WinExec
LocalSize
CreateEventA
SetThreadPriority
lstrcpyW
ExitThread
CloseHandle
gdi32
StartPage
SetMapMode
GetBitmapBits
TextOutA
CreatePatternBrush
GetPixel
Exports
Exports
?rglyipddesiUFGrMlo@@YGJIPAN@Z
Sections
.text Size: 512B - Virtual size: 156B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 375KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ