X:\ixoeiw\zgSwaBd\sdgo\bpcq.pdb
Static task
static1
Behavioral task
behavioral1
Sample
85e069ae7f18e322c1488f4b9a3e3dde_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
85e069ae7f18e322c1488f4b9a3e3dde_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
85e069ae7f18e322c1488f4b9a3e3dde_JaffaCakes118
-
Size
112KB
-
MD5
85e069ae7f18e322c1488f4b9a3e3dde
-
SHA1
a6ae8337d7e7dd062e7d0dcf3d90bc40b13cd93e
-
SHA256
d5b437ba87a3b283974bd77291a2830d0e770a47d6f9dd83aa730d8e09b63470
-
SHA512
fbf8be537ff3eda569033440a9e87026529333f34bf99feb03a6549c72ae23a692a16f09a21ce0dbb459a85b5de81f07fe07be9cf6bd4f2f72e715f736700e5f
-
SSDEEP
3072:wtzNv88p/XteXD2x4Q5U2M2YDlKWIyHWc28n3HO5:wtzf/4XChU2k5n7Z283u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85e069ae7f18e322c1488f4b9a3e3dde_JaffaCakes118
Files
-
85e069ae7f18e322c1488f4b9a3e3dde_JaffaCakes118.exe windows:5 windows x86 arch:x86
6bcfa14bb77c678ac3e313caccec379c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
ImageList_Draw
ImageList_GetIcon
ImageList_Read
CreateToolbarEx
gdi32
GetROP2
GetTextExtentPoint32A
PolyBezier
GetNearestPaletteIndex
CreateCompatibleBitmap
SetAbortProc
EnumFontFamiliesW
CreateHatchBrush
user32
GetWindowLongW
RegisterWindowMessageA
DragObject
RemoveMenu
DefWindowProcW
GetMenuItemID
ShowScrollBar
DispatchMessageW
IsCharAlphaNumericW
TrackPopupMenuEx
CreateAcceleratorTableW
GetMessageW
GetPropW
BringWindowToTop
kernel32
ClearCommError
SetThreadLocale
GetProcAddress
lstrcmpiW
GetFileType
LoadLibraryW
GetVersionExA
GetModuleFileNameW
GlobalAddAtomA
lstrlenA
SleepEx
SetErrorMode
FindClose
comdlg32
GetSaveFileNameA
PrintDlgW
shlwapi
StrCmpNA
Exports
Exports
?rrTjkjtkfYgsztkqriRVo@@YGXF@Z
?uoBbtYjmdiKevmg@@YGNM@Z
?jMjhzThVbRdvjsaU@@YGFK@Z
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 169B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ