J:\ctcsXgFc\KropPhFb\FlgzRuk\tMdsUp.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a1316b2346c9022925ac30d02b8eeaff_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a1316b2346c9022925ac30d02b8eeaff_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a1316b2346c9022925ac30d02b8eeaff_JaffaCakes118
-
Size
94KB
-
MD5
a1316b2346c9022925ac30d02b8eeaff
-
SHA1
da6fea91138b8d3b0222393ba5256a9fe275b5ad
-
SHA256
f882d3ede484c0bdef27ca4e66f97742ca08bf2462126e4c49cd1b32e065074c
-
SHA512
07e4738fc60cdbba5700884a8225fd27d526c29f3c15b87c236ca8f406e104ca98f1c4a6a1c39ff04ac4be174f7b1bc68130800b3f876b2492dffe935c72efac
-
SSDEEP
1536:/uxfK7KUe5uSBHQjkCc+TBsYuqw0xrPhMO+E2YOc7kOiNRDqubCjzBLO06uMgU+I:/erUe5D5QwqvjmjE2YOAwNcBh6uoig
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1316b2346c9022925ac30d02b8eeaff_JaffaCakes118
Files
-
a1316b2346c9022925ac30d02b8eeaff_JaffaCakes118.exe windows:5 windows x86 arch:x86
afd327d2ce873ea034f22f43a43ebdd8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
PathGetArgsA
kernel32
ExitThread
lstrlenW
SetCurrentDirectoryA
FindFirstChangeNotificationW
LoadLibraryA
SetHandleCount
FreeResource
GetCurrentProcessId
GetCurrentThreadId
user32
GetWindowTextW
PostThreadMessageW
DefWindowProcW
EqualRect
AppendMenuW
KillTimer
MapVirtualKeyW
GetPropW
DrawTextExW
GetMenuItemID
FindWindowExA
GetClassNameW
GetClassInfoW
InsertMenuItemW
gdi32
ScaleWindowExtEx
GetDIBits
LineTo
SelectObject
StartDocW
CreateCompatibleDC
Exports
Exports
?X_UWGRXDdpp_bmnt_S@@YGXPAHG@Z
?krHWLW_S_am@@YG_NNI@Z
?ba_djpDZVFLN@@YGKI@Z
?OXLFQiq@@YGPAIKPAF@Z
?r_seqfebGS_T_IO_W@@YGPAKHPAM@Z
?VyolOX_N@@YGID@Z
?AY_T__KAAWcqqzar@@YGXFPA_N@Z
?IEKDGkbB_TACQ@@YGPAIPAG@Z
?i_e_bzmb@@YGFE@Z
?V_YSRENTapvu_O@@YGXFPAH@Z
Sections
.text Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ