E:\WOvgnah\ozPqtb\iitr\xapnpip\GDupP.pdb
Static task
static1
Behavioral task
behavioral1
Sample
97428f488fb636ba21955ebab67c1805_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
97428f488fb636ba21955ebab67c1805_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
97428f488fb636ba21955ebab67c1805_JaffaCakes118
-
Size
219KB
-
MD5
97428f488fb636ba21955ebab67c1805
-
SHA1
0db9dfc7247d47efe83819d2672ea666c5c529b3
-
SHA256
ad19a3a3d16ae00ff8aed553d7479456f49dba5c376d0984ca24fef05ac0640d
-
SHA512
61c7407a28ca82f270fa9387583a6d5612ba1b6d104d7c6a6bc0828213f933d16d544a612b786f063363806c5117d31a01e09cb331cfe287d9583b500c8e492b
-
SSDEEP
6144:kQvlZSaZqr+c0dAzrLb6gZO5bj6hGnIWxAPrBe0T:kGlnYaAzryvj6IIWmP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 97428f488fb636ba21955ebab67c1805_JaffaCakes118
Files
-
97428f488fb636ba21955ebab67c1805_JaffaCakes118.exe windows:5 windows x86 arch:x86
77540f0741579ad85e0bdb317424c568
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
PathFindFileNameA
comdlg32
CommDlgExtendedError
FindTextW
kernel32
IsBadReadPtr
QueryDosDeviceW
GetSystemDefaultLangID
CreateSemaphoreA
GetSystemDirectoryW
lstrcpynA
ClearCommBreak
gdi32
Polyline
GetDIBits
LineTo
CreateRectRgn
CreateICW
SetBrushOrgEx
user32
GetClassInfoExA
ExitWindowsEx
DefFrameProcW
AppendMenuA
TranslateAcceleratorW
SetDlgItemTextW
IsCharAlphaW
SetTimer
CopyImage
DrawEdge
CharToOemA
GetMessageW
CreateDialogParamA
IsCharLowerA
Exports
Exports
?jjhtpgyr_d@@YGDJM@Z
?XV_IEMpUDKD_GCBY@@YGMPAE@Z
?_ey_MWZ_QZJvqbu_@@YG_NEJ@Z
?UA_IL_YD_@@YGPAIPAHH@Z
?ER_RQXwt_sXFP_B@@YGPAXG@Z
Sections
.text Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA1 Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA2 Size: 66KB - Virtual size: 229KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ