K:\lhkzk\vYfHvddb\dsDxm.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8c1c2a8bbb3b3b289cb1d7094184590d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8c1c2a8bbb3b3b289cb1d7094184590d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8c1c2a8bbb3b3b289cb1d7094184590d_JaffaCakes118
-
Size
112KB
-
MD5
8c1c2a8bbb3b3b289cb1d7094184590d
-
SHA1
eee5be2309279aaaf35ed7af240fd7ead65697a5
-
SHA256
0d5ec4772caf4eeae8209e3cd97fd1bb149e2dd4eeb2f62a8311b45fa47dbd93
-
SHA512
2652d2bb4a4271db119571f24303a1a8bf17b06564353fb41bab0d1106b34286ff1659af60ae96f06f53ec83f052e18b277eae318b26eb310e9952b5ec451716
-
SSDEEP
1536:/TV6Ln9kzhk2xgzCzPq1Dwt/ee1OOTFWq/9p4HhpVNqAggkL94:/RA+hksgzLxedRWqwpegkq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c1c2a8bbb3b3b289cb1d7094184590d_JaffaCakes118
Files
-
8c1c2a8bbb3b3b289cb1d7094184590d_JaffaCakes118.exe windows:5 windows x86 arch:x86
1ce8de6ad629d8afe3c328ec9e1411ab
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
EnumChildWindows
InternalGetWindowText
CloseDesktop
GetPropW
SetClassLongW
GetSystemMetrics
ShowScrollBar
GetWindowTextW
GetWindowLongW
IsCharUpperA
UnionRect
CreateDialogParamW
shlwapi
StrCmpNW
gdi32
SetWindowOrgEx
GetFontData
BeginPath
EndPath
IntersectClipRect
GetTextFaceW
CreateCompatibleBitmap
SetWindowExtEx
kernel32
GetFullPathNameW
CreateFileW
SystemTimeToFileTime
lstrlenW
GetProcAddress
SetSystemTimeAdjustment
MulDiv
lstrcmpiW
LoadLibraryW
LocalFree
QueryPerformanceCounter
GetSystemWindowsDirectoryA
SetCurrentDirectoryW
LoadLibraryA
Exports
Exports
?kLpbyWBpoorIhj@@YGXPAJK@Z
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 946B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 94B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ