G:\ivsE\jEGk\yzPqJka.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8cdae476c11c2bc89125fb2ba0260ee4_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8cdae476c11c2bc89125fb2ba0260ee4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8cdae476c11c2bc89125fb2ba0260ee4_JaffaCakes118
-
Size
60KB
-
MD5
8cdae476c11c2bc89125fb2ba0260ee4
-
SHA1
0c85699c6bba953a057f38570a9da9fe88afecb6
-
SHA256
004e55ecb3f291396a6dab6f4bc9bb00c48e510fd2fbd38f5942ca1db253b512
-
SHA512
a310508f169a5c1f6d0867a2e2afd281e890301d272a64eff850a3bb9a039fcffbdeabc909096d4a23684128b7c013f65d5b3d2c3eadcab4b99debd1506edaeb
-
SSDEEP
768:1sT3K4DCcuj5FrysWHeQtF6QB4wrJK/Zm1PNQTJnFeI6al6LSeFV93BbdmgYvyKH:1sT3kTOsWH7tkQdK8KJ0I7oFTx3hKlR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cdae476c11c2bc89125fb2ba0260ee4_JaffaCakes118
Files
-
8cdae476c11c2bc89125fb2ba0260ee4_JaffaCakes118.exe windows:5 windows x86 arch:x86
31128119eb83598254d31546be47e89f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
CheckDlgButton
IsRectEmpty
ShowWindow
GetClipCursor
wvsprintfA
DrawStateW
GetPropW
DialogBoxParamW
AdjustWindowRect
ScreenToClient
GetMessageW
EndPaint
GetClientRect
LoadAcceleratorsA
gdi32
CreatePatternBrush
SetPixel
PatBlt
SetDIBColorTable
CreateDIBitmap
EnumFontsW
kernel32
FileTimeToDosDateTime
GetSystemTimeAsFileTime
ExitThread
DisconnectNamedPipe
FindNextFileA
GetCurrentProcessId
GetBinaryTypeA
SuspendThread
ntdll
wcslen
Exports
Exports
?kJaUmxTvjwgu@@YGDFPAI@Z
?vVjdnwYlugdlcxUep@@YGPAJKJ@Z
?lnvgFzegdjdIwfw@@YGHI@Z
?IRHPqyaNjUuzdaeGrVJr@@YGJFI@Z
Sections
.text Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1024B - Virtual size: 1002B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ