V:\Wumjopm\cibwcw\NkaB.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8a96ae0838506459dd0921c46facf7f4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8a96ae0838506459dd0921c46facf7f4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8a96ae0838506459dd0921c46facf7f4_JaffaCakes118
-
Size
112KB
-
MD5
8a96ae0838506459dd0921c46facf7f4
-
SHA1
ed114a444b1eb231f8cee2674c8b512bc9e8adb2
-
SHA256
3355ec203775df56173cd04c3b8288682677768c7d36c48bf66bd6eac3847f45
-
SHA512
7a005a9db49111000d099417f18240d4e0c055fdc4789aaa11e0cf0223f1d5719356db88c32a12ddd2f5d5ed3718a10669b2d5721cca9ffd4683a659977359c4
-
SSDEEP
3072:lefWfwKW+DOahtKpYLbNtdSaITPrtbJxIQKf3fWg:l2KOmsWLbjdSaITP+QyPx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a96ae0838506459dd0921c46facf7f4_JaffaCakes118
Files
-
8a96ae0838506459dd0921c46facf7f4_JaffaCakes118.exe windows:5 windows x86 arch:x86
719a2e00304860669b6cb41b03ac0a57
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
ImageList_ReplaceIcon
ImageList_GetImageCount
ImageList_Draw
shlwapi
StrCmpNW
kernel32
EscapeCommFunction
lstrlenW
GetLocaleInfoW
GetProcAddress
FormatMessageA
LoadLibraryW
GetHandleInformation
lstrcmpiW
GetAtomNameW
CompareStringW
MulDiv
AddAtomW
gdi32
DPtoLP
CreateFontIndirectA
GetRgnBox
GetObjectA
PtVisible
ScaleWindowExtEx
SelectClipRgn
RectInRegion
comdlg32
ReplaceTextW
PrintDlgExW
GetSaveFileNameW
ChooseFontW
user32
IsCharUpperA
CreateDialogParamA
GetPropW
ShowScrollBar
GetDCEx
MapWindowPoints
TabbedTextOutW
SetMenuItemInfoW
CallWindowProcA
CreateWindowExW
GetWindowLongW
CharLowerBuffW
Exports
Exports
?auHjzUwejfjpxqmIz@@YGGPAK@Z
?TlpltsskBn@@YGPAJ_N@Z
?YXlgRUlgnguulvKqZrerP@@YGMNN@Z
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 171B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ