D:\Eqafepe\Oqa\Fuvuw\Aciqec\ytujew\Bomamej.pdb
Static task
static1
Behavioral task
behavioral1
Sample
68818a62270cdb8d325dc2433ac054e6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
68818a62270cdb8d325dc2433ac054e6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
68818a62270cdb8d325dc2433ac054e6_JaffaCakes118
-
Size
140KB
-
MD5
68818a62270cdb8d325dc2433ac054e6
-
SHA1
c190bb746ce080799cfc5c7f955a1d645623580a
-
SHA256
7cf06a235a201593a0dcc7728b0750b3e11c546ea14885a724c98d32f7feebc1
-
SHA512
5b5a1d5f9cd4a66e59ea1b5ee72d52d6dac04a8393c064e7a455cbf74856907b9e1a828e219d27a663bbda6cbaaccccca4edfad31224bd323c1898fa1d5ef6a4
-
SSDEEP
3072:vtWJHYKowCURlo+kqIXkr3ptZjzEM7ZMsP4AAr:VWJ48DKhM7ZLF6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68818a62270cdb8d325dc2433ac054e6_JaffaCakes118
Files
-
68818a62270cdb8d325dc2433ac054e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
6be714ec5e3eb9bb169a2187d662f70d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
CreateEventW
FileTimeToSystemTime
GetVersion
GetSystemTimeAsFileTime
GetProcessHeap
GetLocalTime
CreateFileW
WriteConsoleW
GetModuleFileNameW
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
HeapSize
VirtualQuery
InterlockedExchange
RtlUnwind
LoadLibraryA
GetStartupInfoA
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoW
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetCurrentProcessId
user32
FillRect
TrackPopupMenu
DrawFrameControl
PostMessageW
SetWindowLongW
IsDialogMessageW
GetActiveWindow
AppendMenuW
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 647KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ