C:\xfaq\srnwyhn\lyVzskq.pdb
Static task
static1
Behavioral task
behavioral1
Sample
70d14bcd664df90560a96e62e4a17657_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
70d14bcd664df90560a96e62e4a17657_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
70d14bcd664df90560a96e62e4a17657_JaffaCakes118
-
Size
112KB
-
MD5
70d14bcd664df90560a96e62e4a17657
-
SHA1
d70446c2b6046d43d2c5a55f4e5914d6fb8f1b94
-
SHA256
539da2751c90fa1163fb76f632b53a88e2ab4470d26e937b3605e67975aef003
-
SHA512
33d737425e5789c84c5811f45a72a9cb80b9d46b95b3781b75c6199a9c7229179908d30e528ec4314fde26a75185c80d47e13cda476145eb37d935376ef0267d
-
SSDEEP
1536:+ZJwmoVlYunQXP29YHCpWI0PQTBZA5NpvoqpGwq/KdSK/smDEqsTyFgAg4MPzAt:EYlYunQXMi0AzpvrGnSdnrZF04Bt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70d14bcd664df90560a96e62e4a17657_JaffaCakes118
Files
-
70d14bcd664df90560a96e62e4a17657_JaffaCakes118.exe windows:5 windows x86 arch:x86
82a5c6410293a9d421ce00df64929f67
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
ShowScrollBar
ScreenToClient
DialogBoxIndirectParamW
CharToOemBuffA
GetDC
DefFrameProcW
TranslateAcceleratorA
GetPropW
GetWindowLongW
MapVirtualKeyW
IsCharUpperA
LoadMenuW
DispatchMessageA
kernel32
lstrlenW
GetCommandLineW
FindResourceW
GetProcAddress
GlobalFindAtomW
LoadLibraryW
ClearCommBreak
FindClose
OpenFile
lstrcmpiW
SearchPathW
ReleaseSemaphore
GetFileAttributesExA
SetFileAttributesW
gdi32
CreateBrushIndirect
CreatePolygonRgn
SetTextAlign
ResizePalette
SetDIBits
RemoveFontResourceW
GetObjectA
shlwapi
StrCmpNW
Exports
Exports
?xheZwgRigQOrztm@@YGPADPAGPAF@Z
?yobbavUVtjysoudcV@@YGKM@Z
?kPsvgBkiOntVybdrfki@@YGKF@Z
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 175B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ