G:\rNvdlsqx\eufyaqlt\wPhautf\raucoy.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8b1b7ac2f3d08d3aef82a2ba3c7c81f1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8b1b7ac2f3d08d3aef82a2ba3c7c81f1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8b1b7ac2f3d08d3aef82a2ba3c7c81f1_JaffaCakes118
-
Size
114KB
-
MD5
8b1b7ac2f3d08d3aef82a2ba3c7c81f1
-
SHA1
c19982fd1e0e6f1e194ddcd608f587bd43ba2d94
-
SHA256
3cba4db0bef28c566d40263b4767e1dd37f41302400a8c850fbc7e989fc506cd
-
SHA512
0185431f52a357dff3c964379cba37374e262e4c55d0a248f4fd1de52b16891752509f724251ba775b7e66bc95b6a45f8fe95f922f1f17e809ef2334b1cafe0e
-
SSDEEP
3072:RbsLNu7ICZ3C58ftqmemnHPo35+fg/y2:Rwxw281qio4J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b1b7ac2f3d08d3aef82a2ba3c7c81f1_JaffaCakes118
Files
-
8b1b7ac2f3d08d3aef82a2ba3c7c81f1_JaffaCakes118.exe windows:5 windows x86 arch:x86
5b3845ae89634a701003968a309c5929
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
LoadLibraryW
GetProcAddress
SetEndOfFile
OpenFileMappingW
lstrcmpiW
GetFileInformationByHandle
EnumResourceNamesW
lstrlenW
GlobalSize
GetCommTimeouts
SetLastError
GetWindowsDirectoryW
GetSystemDefaultLangID
comctl32
ImageList_GetImageCount
ImageList_AddMasked
CreatePropertySheetPageA
comdlg32
PrintDlgW
ChooseFontW
GetSaveFileNameA
user32
GetMenuStringA
GetPropW
LoadAcceleratorsW
GetWindowLongW
IsCharUpperA
DefDlgProcW
ShowScrollBar
IsChild
SendDlgItemMessageW
DialogBoxIndirectParamA
CreateIconIndirect
MapDialogRect
SetTimer
DialogBoxParamA
shlwapi
StrCmpNW
gdi32
SetDIBits
Polygon
GetTextCharsetInfo
EndPage
StretchDIBits
CreatePalette
GetCurrentObject
GetDIBits
SetBitmapDimensionEx
Exports
Exports
?XCoVrbqms@@YGXJ@Z
?YNgrjNkujz@@YGPAMKPAG@Z
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 121B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ