Z:\Leudavf\uskochk\Nzukac\cikfv.pdb
Static task
static1
Behavioral task
behavioral1
Sample
883daccc59d132af888cb8f520039e36_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
883daccc59d132af888cb8f520039e36_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
883daccc59d132af888cb8f520039e36_JaffaCakes118
-
Size
109KB
-
MD5
883daccc59d132af888cb8f520039e36
-
SHA1
bab20d23efcd6b08cde7605bac43c40b3bed6713
-
SHA256
673c3255b3bf914335a83dff4160e9e40b4f4c0cf3b1a005a1a9a9b18c39f1b8
-
SHA512
ea776bcb8c0b6610075c435d1d9eba8b2a770cbc35b588e764637babc31f031d5ef659c57592c45af8b520b3a63f145db5e503bc9a2a9bf0bb8e6314983ca40f
-
SSDEEP
1536:xLhW4t/ZF1NtFzBLDy6iPFOdm4GgUQSH05KwH26aeAgG:S4tRF1THRiQE4fSU5f3G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 883daccc59d132af888cb8f520039e36_JaffaCakes118
Files
-
883daccc59d132af888cb8f520039e36_JaffaCakes118.exe windows:5 windows x86 arch:x86
80964648a0c2a1316e2784a0e456f4b4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
CreateFontA
LineDDA
ResizePalette
SetDIBitsToDevice
CreateDiscardableBitmap
GetPixel
EndPath
GetWindowOrgEx
user32
GetWindowLongW
IsWindowUnicode
DispatchMessageA
IsCharUpperA
GetPropW
DrawFrameControl
DestroyWindow
GetMenu
DestroyCaret
ClientToScreen
ShowScrollBar
wsprintfA
kernel32
lstrlenW
GlobalMemoryStatus
GetProcAddress
lstrcmpiW
GetComputerNameExW
FoldStringW
GetThreadLocale
LoadLibraryW
GetTimeZoneInformation
GetModuleHandleA
CompareStringA
GetVersion
shlwapi
StrCmpNW
comdlg32
PrintDlgExW
FindTextW
GetSaveFileNameW
GetFileTitleW
Exports
Exports
?xSjdjscnctAknnkieLg@@YGFJ@Z
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 988B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ