G:\ivsE\jEGk\yzPqJka.pdb
Static task
static1
Behavioral task
behavioral1
Sample
68f3dd4386da15b9ce8595035b7818f5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
68f3dd4386da15b9ce8595035b7818f5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
68f3dd4386da15b9ce8595035b7818f5_JaffaCakes118
-
Size
60KB
-
MD5
68f3dd4386da15b9ce8595035b7818f5
-
SHA1
1e6fdbb73acab8162b61df538cfa1020228fbfe4
-
SHA256
beb5bec4b05cd2a3f36a0492b9ff11f3778e371a1e086d82906d4df013e3740e
-
SHA512
356c6d3b244af4b30051c3a9f27cc55f849b9470027caec633bef90a477e7c492b1bcba1ae5e1f5d04e5b5599696016ded48f94130d86dbf65759ee913c20056
-
SSDEEP
768:BsT3K4DCcuj5FrysWHeQtF6QB4wrJK/Zm1PNQTJnFeI6al6LSeFV93BbdmgYvyK5:BsT3kTOsWH7tkQdK8KJ0I7oFTx3hKlr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68f3dd4386da15b9ce8595035b7818f5_JaffaCakes118
Files
-
68f3dd4386da15b9ce8595035b7818f5_JaffaCakes118.exe windows:5 windows x86 arch:x86
31128119eb83598254d31546be47e89f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
CheckDlgButton
IsRectEmpty
ShowWindow
GetClipCursor
wvsprintfA
DrawStateW
GetPropW
DialogBoxParamW
AdjustWindowRect
ScreenToClient
GetMessageW
EndPaint
GetClientRect
LoadAcceleratorsA
gdi32
CreatePatternBrush
SetPixel
PatBlt
SetDIBColorTable
CreateDIBitmap
EnumFontsW
kernel32
FileTimeToDosDateTime
GetSystemTimeAsFileTime
ExitThread
DisconnectNamedPipe
FindNextFileA
GetCurrentProcessId
GetBinaryTypeA
SuspendThread
ntdll
wcslen
Exports
Exports
?kJaUmxTvjwgu@@YGDFPAI@Z
?vVjdnwYlugdlcxUep@@YGPAJKJ@Z
?lnvgFzegdjdIwfw@@YGHI@Z
?IRHPqyaNjUuzdaeGrVJr@@YGJFI@Z
Sections
.text Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1024B - Virtual size: 1002B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ