C:\zusdqRnq\DsgwUUD\uXYkc\hgjsIqot\HnvjkbK.pdb
Static task
static1
Behavioral task
behavioral1
Sample
70b3a2c45ba615f6432e50e403c94fbb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
70b3a2c45ba615f6432e50e403c94fbb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
70b3a2c45ba615f6432e50e403c94fbb_JaffaCakes118
-
Size
141KB
-
MD5
70b3a2c45ba615f6432e50e403c94fbb
-
SHA1
1e279c0353aad4027a7d12d939aef281f18437c7
-
SHA256
cdee2adfe3df2715208f81157430fc680b3f07435084670ce0b2138276c5d303
-
SHA512
6446c528e50837a8a9fd7cb7cbadf74cad76b438a71a4046b3a311f8b8abe9d78780583ed8bd0fcaf1123669de138aee189d3284447501568d9ee54c5ee9e650
-
SSDEEP
3072:bYhCjUyW4CCWvVaiCyM+wZYw/8z94VPJGMQRCQsV+/:shCjUJ4mvVwygZ+z94VPZQcA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70b3a2c45ba615f6432e50e403c94fbb_JaffaCakes118
Files
-
70b3a2c45ba615f6432e50e403c94fbb_JaffaCakes118.exe windows:5 windows x86 arch:x86
6fdf8b86901aa66cdb60ddd47199bccc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetTempFileNameA
LocalFree
LoadLibraryW
GetCompressedFileSizeW
GetFileInformationByHandle
lstrlenW
DeviceIoControl
SetCommTimeouts
lstrcmpA
GetLongPathNameW
SetFileAttributesA
CompareFileTime
user32
SendMessageA
GetWindowTextLengthW
SetWindowPos
SendMessageTimeoutA
SwitchToThisWindow
IsCharAlphaW
SetFocus
GetWindowTextLengthA
RemovePropW
SetCursorPos
SetScrollRange
wsprintfW
GetClipCursor
comctl32
CreatePropertySheetPageA
PropertySheetA
CreateToolbarEx
shlwapi
StrIsIntlEqualW
PathIsUNCW
StrCmpNIW
gdi32
SetBkMode
GetTextExtentPoint32W
SetTextColor
CreateSolidBrush
PtVisible
StretchBlt
GetViewportOrgEx
ntdll
_aullrem
Exports
Exports
?zgJJkaZZxFbfh@@YGPAHK@Z
?hbloIvqbzvehtjukt@@YGGG@Z
?PPvxjtvaZclef@@YGPAXJ@Z
?RlijdGpzjzhyeeDl@@YGIGD@Z
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ