H:\OzFksi\jfvp\wpkoskdi.pdb
Static task
static1
Behavioral task
behavioral1
Sample
76ec118c4f8ebd49c8c7d236461c51d2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
76ec118c4f8ebd49c8c7d236461c51d2_JaffaCakes118.exe
Resource
win10v2004-20240729-en
General
-
Target
76ec118c4f8ebd49c8c7d236461c51d2_JaffaCakes118
-
Size
218KB
-
MD5
76ec118c4f8ebd49c8c7d236461c51d2
-
SHA1
965de06c752b37e06842b43a045503bb364f4061
-
SHA256
59e86621b779766100cc486b2622f8de25f6b46b1aaa7d8a669a76b604f439c8
-
SHA512
22ed02b38a7399c8dcd637a078dcc9bad4c139248fc134ec3e00f7236069f1cde7ab2a84ff7e5dfa3bb78e7efbeba01ffa1556ff3a559ee2f1e8898754bf830f
-
SSDEEP
3072:PzCMu7RKubL0irnzJQb5CsjXn2i52Xh1bGJtlB85V1m1xWLdl8HhTh1yQPJezLA:rCDMubYiZQwGn24Yh1byBz1x2woA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76ec118c4f8ebd49c8c7d236461c51d2_JaffaCakes118
Files
-
76ec118c4f8ebd49c8c7d236461c51d2_JaffaCakes118.exe windows:5 windows x86 arch:x86
dbc1a42727bf2c657f2a75297598181c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
SetBkMode
CreatePen
CreateRoundRectRgn
AddFontResourceW
CreateBrushIndirect
kernel32
lstrcatW
GlobalSize
lstrcmpA
SetFileAttributesW
GlobalGetAtomNameA
GetExitCodeProcess
GlobalAddAtomW
OpenEventA
GetCurrentProcess
user32
GetNextDlgTabItem
FrameRect
wvsprintfW
GrayStringW
CopyAcceleratorTableW
DrawIcon
IsCharUpperW
RegisterWindowMessageW
ChildWindowFromPointEx
DialogBoxParamW
CharNextExA
GetDlgItemInt
SetWindowTextA
GetMessageTime
shlwapi
PathIsPrefixA
PathSkipRootW
Exports
Exports
?_SQ__PHUJZQg__d__@@YGFPAKM@Z
?n_onvZGRXF_YV__AIMk@@YGXIM@Z
?IKTWM_JW__JNE@@YGJG@Z
?deonhsdMMCEEXLQXGREU@@YGXM@Z
?NGY_FTFL@@YGPAXJ@Z
?DUBUQIP_C_D_OLC_JLT@@YGEPAHM@Z
?HFJVT_X_nd@@YGXPAGPAK@Z
?sF_FJTZSA_SiuxlzCP@@YGDG@Z
?s_anAD_XCdtso_pb_@@YGPAFPA_NK@Z
Sections
.text Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA1 Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA2 Size: 66KB - Virtual size: 229KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ