G:\nYAsvlUu\oYjZyl\ngeXbml.pdb
Static task
static1
Behavioral task
behavioral1
Sample
9fd2f0d06ba2dead2a7525739651ae6e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
9fd2f0d06ba2dead2a7525739651ae6e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9fd2f0d06ba2dead2a7525739651ae6e_JaffaCakes118
-
Size
108KB
-
MD5
9fd2f0d06ba2dead2a7525739651ae6e
-
SHA1
d89fd108f4addb40c83ec23d9ba18d5e8b909a4f
-
SHA256
ea3f68ee29b0e5b23776f6789f6c3caa5eb901963e3ce0fd95ab94d05f94ab60
-
SHA512
b745a9a7ccea173f343e2111366c7e50c986ea4121ef35a4474877b1dc580e21626afe26e721a57c735eda825331c109c25a63ed1fc384b047a2ac4616587342
-
SSDEEP
3072:I5c3bqZvOPq0FZ5ZGi0bprAnUWQYH1FtiADYju:RLqZvOiaJ0hgUjuDilu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9fd2f0d06ba2dead2a7525739651ae6e_JaffaCakes118
Files
-
9fd2f0d06ba2dead2a7525739651ae6e_JaffaCakes118.exe windows:5 windows x86 arch:x86
658ab3ffdf965044f21aed0e5870e87c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comdlg32
GetFileTitleW
GetOpenFileNameW
FindTextW
GetOpenFileNameA
PrintDlgExW
user32
GetKeyboardLayoutList
SendNotifyMessageW
AppendMenuW
CheckDlgButton
MonitorFromRect
CallWindowProcW
UnloadKeyboardLayout
GetNextDlgTabItem
ToUnicodeEx
GetSystemMetrics
GetClipCursor
PostMessageA
SwitchToThisWindow
DrawEdge
DeferWindowPos
GrayStringW
EndDialog
GetWindow
GetMessageA
LoadAcceleratorsA
ClientToScreen
CreateMenu
AttachThreadInput
SendMessageTimeoutA
KillTimer
SystemParametersInfoA
LoadMenuA
SetClassLongW
SetCaretPos
CreatePopupMenu
IsCharAlphaW
CheckMenuRadioItem
IsDialogMessageA
kernel32
ClearCommError
CopyFileW
GetSystemWindowsDirectoryW
GetCompressedFileSizeW
LCMapStringA
GetLocalTime
GetSystemWindowsDirectoryA
lstrcpyW
SetErrorMode
GetDateFormatW
GetPriorityClass
TransactNamedPipe
GetAtomNameW
lstrcatW
CreateMutexA
GlobalCompact
GetCurrentProcessId
gdi32
TranslateCharsetInfo
CreateDCW
StartDocW
CreateSolidBrush
BitBlt
GetTextExtentExPointW
Escape
WidenPath
CreateBitmap
SetWindowOrgEx
SetDIBits
CreatePolygonRgn
GetRgnBox
GetTextExtentPoint32W
Exports
Exports
?_GetMouseMovePointsEx@@YGXHPAD@Z
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 24KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ