F:\hdukQrqndlEhf\rxmBrDTwwzd\rabckvmqiR\tHddrvrCjbnbkN\pnodRlAbotlw.pdb
Static task
static1
Behavioral task
behavioral1
Sample
721de8e811dfe038832c0c02763d8253_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
721de8e811dfe038832c0c02763d8253_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
721de8e811dfe038832c0c02763d8253_JaffaCakes118
-
Size
263KB
-
MD5
721de8e811dfe038832c0c02763d8253
-
SHA1
fcf4bbacc8542d90051ea99835a6247691cedd30
-
SHA256
e09530ba85b8b4d7004dfe588428c6a30bcc4e16a1762efb9e27d0350d072e83
-
SHA512
6a4ea77dec8f73b40aa897bd9cbb927912de47fe5b98619f32988cc1326a2d2e45bb0851dcec41aff2fd86a39763cb9bade324516a12102950b0690e31ead677
-
SSDEEP
6144:jzP6oNP0/jK6jnkgseZ7EvzzOFXucZWLQXPiIgJ/:nPfNP0/h2m7Eb6IcZw1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 721de8e811dfe038832c0c02763d8253_JaffaCakes118
Files
-
721de8e811dfe038832c0c02763d8253_JaffaCakes118.exe windows:5 windows x86 arch:x86
afa85531621af93fe9167103117683b1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
ord158
user32
CharNextExA
CheckDlgButton
IsWindow
GetMessageTime
IsCharUpperA
wsprintfA
ShowCursor
gdi32
UnrealizeObject
EndPath
SetROP2
GetPixel
ExtTextOutA
msvcrt
_controlfp
__set_app_type
__p__fmode
strtoul
__p__commode
mbstowcs
_amsg_exit
_initterm
_ismbblead
_XcptFilter
_exit
_cexit
__setusermatherr
__getmainargs
swprintf
kernel32
DeviceIoControl
GetModuleFileNameA
SetSystemTime
SetMailslotInfo
GetStringTypeExW
LoadLibraryW
GetModuleHandleA
Exports
Exports
?CreateDlgMessage@@YGHPAXPADK|U
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 237KB - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE