C:\LbkUz\iQjqWu\dwgC\tcNncxgg\zYGI.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8b947eafdce32278e13530da2fd08313_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8b947eafdce32278e13530da2fd08313_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8b947eafdce32278e13530da2fd08313_JaffaCakes118
-
Size
182KB
-
MD5
8b947eafdce32278e13530da2fd08313
-
SHA1
c43425c285231bd7a5335be78864b7c4d940fd0a
-
SHA256
490776865ed13b3f35d14b805dee8fe82aa3e19b7475399a3766e4a1020b7391
-
SHA512
94d4b9f1111aa73c299348a42639715a452b07d74201cadfc8960c9da5d25e7b6bf0b233a9813d24d55c95aba00cea7c91096f3d98af2079599d6374be802d88
-
SSDEEP
3072:zU+rUDGBEzJ92AkHb5u9LFMnDSquAtLJ+ncxaswuUg8ILvcqldXSFKhX03S0:YUUSBoL2AkoFCDhZbJDL0Mdw8E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b947eafdce32278e13530da2fd08313_JaffaCakes118
Files
-
8b947eafdce32278e13530da2fd08313_JaffaCakes118.exe windows:5 windows x86 arch:x86
7446cfe1246a490bafc68ac58650c75c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
SetAbortProc
SetWindowOrgEx
CreateRoundRectRgn
GetWindowOrgEx
SelectObject
SetWindowExtEx
DeleteObject
CreateBrushIndirect
kernel32
GetProcAddress
WaitForSingleObjectEx
GetLongPathNameW
WaitForSingleObject
UnlockFile
FindResourceA
LoadLibraryA
lstrlenW
FormatMessageW
lstrcmpiA
GetModuleHandleW
TryEnterCriticalSection
ntdll
_aullrem
user32
DestroyCursor
SetMenuItemBitmaps
LoadImageA
GetScrollPos
GetWindow
DispatchMessageA
InvalidateRect
ScrollWindow
LoadIconW
LockWindowUpdate
RegisterHotKey
CheckMenuRadioItem
OemToCharBuffA
comdlg32
GetSaveFileNameW
GetOpenFileNameW
PageSetupDlgW
ChooseColorW
Exports
Exports
?WylInnVxjtt@@YGPADG@Z
?vLoWRzfvvejmowqLW@@YGPANIF@Z
?ruMkgPpeqecoxohEddpsWn@@YGPAKMJ@Z
?zgkYnvwJwcsZ@@YGHPAM@Z
?hthSRBQdmNbqPggzqg@@YGKPAI@Z
?qMfyRRylWIcitgBH@@YGPAMPAH@Z
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 141KB - Virtual size: 205KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.crt Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ