X:\AUovz\fxrqOdA\hKEqFez.pdb
Static task
static1
Behavioral task
behavioral1
Sample
77f2c3a58b22c4435c98d516a5ef2f8a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
77f2c3a58b22c4435c98d516a5ef2f8a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
77f2c3a58b22c4435c98d516a5ef2f8a_JaffaCakes118
-
Size
161KB
-
MD5
77f2c3a58b22c4435c98d516a5ef2f8a
-
SHA1
55a6eb84e2a7dc793e979bc739029a3d07ca1e96
-
SHA256
d746d0a3a1fae9d6a6d097459a143de729f97d7cac444e1bfd54b3073b5a0240
-
SHA512
7dbce4f9b6cdf26268344407f33d725d1a5e47a29fde5c9247498937bb2f80499db314af68e6fb8f81f785cef2ed0406a69bdb6f65caac5714cf241f02eaea44
-
SSDEEP
3072:x19HworjVwI3iKEK2zL42iMv/aUWANlV4+LDS/cRh:/9Qo6TVfvZ/vWANlV3u/c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77f2c3a58b22c4435c98d516a5ef2f8a_JaffaCakes118
Files
-
77f2c3a58b22c4435c98d516a5ef2f8a_JaffaCakes118.exe windows:5 windows x86 arch:x86
8aae5e38aebefcb866de05855bc990be
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
ImageList_AddMasked
ImageList_GetIconSize
CreatePropertySheetPageA
shlwapi
StrSpnW
user32
OpenInputDesktop
IsWindowEnabled
PostThreadMessageW
CharPrevW
DialogBoxParamW
DestroyIcon
GetCaretPos
MapDialogRect
GetFocus
SetSysColors
gdi32
CreateEllipticRgnIndirect
GetNearestPaletteIndex
GetRgnBox
CreateHatchBrush
DeleteObject
TextOutW
BitBlt
SetWindowOrgEx
GetObjectA
kernel32
GetModuleHandleA
lstrcpyA
SetThreadLocale
GetProcAddress
lstrlenA
SetSystemTimeAdjustment
lstrcmpW
GlobalGetAtomNameW
GetSystemDefaultUILanguage
ExitThread
GetVersionExA
CreateWaitableTimerA
GetSystemWindowsDirectoryW
Exports
Exports
?uzbhzdue@@YGXIH@Z
?yOxjigppvwjebI@@YGIPAK@Z
?mlFyhouxt@@YGJKJ@Z
?bmydWhiodxDvdxbbx@@YGPANIG@Z
?pRyfnerxluMnwMcpWyn@@YGIIG@Z
?XONtzvbiAci@@YGD_NG@Z
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ