U:\fpUhrf\dmocHjvs\nkxheyy\vycgWp.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8e6d8187613c718b8c4c4019c1e54d9e_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8e6d8187613c718b8c4c4019c1e54d9e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8e6d8187613c718b8c4c4019c1e54d9e_JaffaCakes118
-
Size
108KB
-
MD5
8e6d8187613c718b8c4c4019c1e54d9e
-
SHA1
6bddfcb20c595ce00b1562e934de5f5334ffa139
-
SHA256
16593e731a41944b683edfaabfc6767f02efcec2a122baedf45dbe854c3f6d0d
-
SHA512
15f3432f73aae01ae618beef1796c89442a809b535125521793062264cf49f7626531e5e7d2859aa2e31b4a1cf86612eb57c33165769deb451ca9a9b9213655e
-
SSDEEP
1536:qZsUt6ozn8LE7+rFlTOw5HJeBBuua4Q0WkGC96FfegEVGWafJlqhIRn0EFYa6OSz:q5t6RoUJPpara7kG9FR4hg9/Z8nw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e6d8187613c718b8c4c4019c1e54d9e_JaffaCakes118
Files
-
8e6d8187613c718b8c4c4019c1e54d9e_JaffaCakes118.exe windows:5 windows x86 arch:x86
74f6a1035e76c57c60cf4ead5b7e3c96
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
GetWindowLongW
ArrangeIconicWindows
ShowScrollBar
TranslateMessage
DestroyIcon
GetPropW
SendMessageTimeoutW
IsDialogMessageW
DrawIcon
GetMenuItemID
DrawFrameControl
GetMenuItemCount
comctl32
InitCommonControlsEx
PropertySheetA
gdi32
GetTextCharsetInfo
GetTextFaceW
SetWindowOrgEx
ExcludeClipRect
TextOutW
GetPixel
GetMapMode
kernel32
GetProcAddress
ClearCommError
GetTimeZoneInformation
lstrcpynA
LoadLibraryW
GetLocaleInfoW
GlobalGetAtomNameW
HeapFree
GetComputerNameW
lstrcmpiW
DisconnectNamedPipe
LocalReAlloc
Exports
Exports
?addyvcOfjtnyWsrgwtupbg@@YGKGK@Z
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.temp Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ