P:\klvUtq\qEbwgso\ZwTsj\HdckBqe\glna.pdb
Static task
static1
Behavioral task
behavioral1
Sample
842e7162c2720320ea440f8d879c3201_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
842e7162c2720320ea440f8d879c3201_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
842e7162c2720320ea440f8d879c3201_JaffaCakes118
-
Size
111KB
-
MD5
842e7162c2720320ea440f8d879c3201
-
SHA1
ddbf17587031d4a15e12c5d482a9fb57a7e87ceb
-
SHA256
5a0647c00079f542c90ec25b51a613be746ec32ec0c04aae2694885f03746dcd
-
SHA512
2f4f865f557a49bff9e454c23abbff30c49b6c2e3560ef846b6292eabb73f46e05c7c191270169e740c9d87d36d0947a3c72d288d6908f594023bb07ae4a1a3f
-
SSDEEP
1536:3fzIpzREGwHLDKtuHJ+PIlIYEQVZuzu2Gza3na8dEBQZNDPAg5csCRjd:3fqzR5wfKtuHJamuzup23narQZNF5cr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 842e7162c2720320ea440f8d879c3201_JaffaCakes118
Files
-
842e7162c2720320ea440f8d879c3201_JaffaCakes118.exe windows:5 windows x86 arch:x86
b519fdb675c601e6ba7ba1a60b7681d1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
lstrcmpiW
GetModuleHandleA
SetCommMask
SetEndOfFile
lstrlenW
GetCurrentThreadId
WaitForMultipleObjects
GetCommProperties
CreateWaitableTimerW
SetFileAttributesA
LoadLibraryW
GetProcAddress
AddAtomW
user32
SendNotifyMessageW
IsCharUpperA
GetClassLongA
GetPropW
GetWindowLongW
ShowScrollBar
IsChild
MessageBoxW
GetWindowDC
GetNextDlgGroupItem
CopyAcceleratorTableW
GetSubMenu
GetActiveWindow
SetActiveWindow
gdi32
BeginPath
ExcludeClipRect
EnumFontsW
SetPixel
OffsetViewportOrgEx
GetTextExtentExPointW
TextOutW
shlwapi
StrCmpNW
Exports
Exports
?vshgjazeqIWjs@@YGFPAGN@Z
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 930B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 93B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ