G:\rswganu\dFZz\tdbsZUy\oTwlp\nRazp.pdb
Static task
static1
Behavioral task
behavioral1
Sample
70e040a0503146686aed770247d475b3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
70e040a0503146686aed770247d475b3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
70e040a0503146686aed770247d475b3_JaffaCakes118
-
Size
96KB
-
MD5
70e040a0503146686aed770247d475b3
-
SHA1
4d33852a3be3d4e3e09d8df2a8fd342a4b197666
-
SHA256
b355b27ab4fde0a63c3dcb7401399d908774366b8f1419594e53476fd6e841b1
-
SHA512
d6bedaf783743f77c94a66a14b001f158686f1b0e57710757d4cb7e50ad85b7029489fb231346ca51c44cca1d3cadf4d1f784f6bf7b404c510557216f08386cd
-
SSDEEP
3072:/jPGouBLPjl8y7y45SxRid68rLVWNOgFh4hxxd:bPGX58y7PKRsHkFhk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70e040a0503146686aed770247d475b3_JaffaCakes118
Files
-
70e040a0503146686aed770247d475b3_JaffaCakes118.exe windows:5 windows x86 arch:x86
a5d2c052e20a00f5e8e8d26f6e385ea9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
ImageList_Destroy
CreatePropertySheetPageW
ImageList_Create
user32
GetWindowLongW
FindWindowExA
LoadBitmapA
AdjustWindowRectEx
LoadAcceleratorsW
IsWindowEnabled
ModifyMenuW
GetWindow
CascadeWindows
DefFrameProcW
SetCursorPos
FindWindowW
BeginPaint
CheckDlgButton
shell32
DragAcceptFiles
kernel32
SetEvent
GetProcAddress
WaitForMultipleObjectsEx
CloseHandle
lstrlenW
ResetEvent
GlobalAddAtomA
GetModuleHandleA
CreateEventA
GetThreadLocale
GetSystemDefaultLangID
GetFullPathNameW
GetModuleHandleW
SuspendThread
gdi32
SetStretchBltMode
DeleteDC
BitBlt
CombineRgn
SetBitmapDimensionEx
RemoveFontResourceW
comdlg32
PrintDlgExW
GetSaveFileNameW
Exports
Exports
?YVgBkPzpoqvwnaae@@YGXJ@Z
?qZahwpxmjAnvba@@YGHF@Z
?tzagumz@@YGPAXI@Z
?xNPBeLzWzvxdcHaVxtk@@YGDPAJ@Z
?legvZbWnfdvh@@YG_NPAE@Z
?BvxqEwyB@@YGMEPAJ@Z
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ