X:\fnkqesrc\BHcsa\rahBfos.pdb
Static task
static1
Behavioral task
behavioral1
Sample
864fcef772701cb88d0d96adbadbdfef_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
864fcef772701cb88d0d96adbadbdfef_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
864fcef772701cb88d0d96adbadbdfef_JaffaCakes118
-
Size
123KB
-
MD5
864fcef772701cb88d0d96adbadbdfef
-
SHA1
ff220c2f3fb30d19d3ff20fc137cad606f7cc13f
-
SHA256
6c17ed59416d4cbf4bf6ea0d3f1a2da4b644dd5c58dd8eeb5c5165d056fa3dc1
-
SHA512
c36a0728dd52b677b3cb22abd573dd17c5697eca0229cd860ef7adb054a0b610feb28e077a8d4cbbb7ed38ec0041deac8bbd8c743cc95c2ed24cfe21a0686164
-
SSDEEP
1536:pqro2ZeCByYA5UkTzGvev3DOuTOv22rpPEouLKxuN8dJpA3GXl6GjiogE3P11:pqP1By95UkXv3DLKBpMHLKW8dJpA2mf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 864fcef772701cb88d0d96adbadbdfef_JaffaCakes118
Files
-
864fcef772701cb88d0d96adbadbdfef_JaffaCakes118.exe windows:5 windows x86 arch:x86
f36b7c161cf94eb1234c4a5d88ad00bf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
lstrcpynW
SetWaitableTimer
QueryPerformanceCounter
SetHandleCount
FileTimeToDosDateTime
ResetEvent
SetFileApisToOEM
SetLocalTime
GlobalSize
RemoveDirectoryW
CreateFileMappingA
LoadLibraryExW
lstrlenW
VirtualFree
user32
CharNextW
ReleaseDC
SetPropW
wsprintfW
FrameRect
SetMenu
GetWindowTextLengthW
GetMenuItemRect
SetWindowTextA
GetSystemMetrics
DestroyIcon
SetMenuItemBitmaps
gdi32
CreateEllipticRgnIndirect
GetTextMetricsA
GetTextCharsetInfo
StretchBlt
PolyBezier
DPtoLP
BeginPath
GetRgnBox
shlwapi
StrCatBuffW
Exports
Exports
?GejHwtyJoECxtrz@@YGDM@Z
?cktOFjtvJxNmrtt@@YGKPAJF@Z
?XrcjxGxoupz@@YGEPAD@Z
?aclIpdKG@@YGJK@Z
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 916B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ