O:\Vsbw\aSuudbkw\kqidh.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a1c97c7da6a4480108142e5fe84d591c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a1c97c7da6a4480108142e5fe84d591c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a1c97c7da6a4480108142e5fe84d591c_JaffaCakes118
-
Size
78KB
-
MD5
a1c97c7da6a4480108142e5fe84d591c
-
SHA1
9b30da8adf930619b3d5691f259c6a0033855c8b
-
SHA256
c58ca09a8548c528408e989511196588f84375313b20c7dafe085abb9354dbb9
-
SHA512
e948da46f63a9cf56da19f0d84370c38588254aa31d88f4f34850b6650e2e7804722ff3888dd86547613eccedfa07a72692a55027ff1b9cef889010f107f83fa
-
SSDEEP
1536:Ca3itvjRUYa1xpfaTFIBCyWYUON0ennnv6B5:Utrpa1/faCYyWYBN0env6r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1c97c7da6a4480108142e5fe84d591c_JaffaCakes118
Files
-
a1c97c7da6a4480108142e5fe84d591c_JaffaCakes118.exe windows:5 windows x86 arch:x86
8ae75f852dcd6355fec64ba2d02305dd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GlobalHandle
GetCurrentThread
GlobalFree
FindFirstFileA
DosDateTimeToFileTime
GetUserDefaultLCID
CreateFileW
InterlockedIncrement
CompareStringA
GetStartupInfoW
SetFileApisToOEM
CreatePipe
gdi32
GetSystemPaletteUse
GetFontData
GetObjectW
CreateRectRgnIndirect
GetTextExtentPointA
SetDIBitsToDevice
LineTo
EndPath
TextOutA
user32
wsprintfW
GetWindowContextHelpId
SetScrollRange
SetWindowPos
CopyRect
DeleteMenu
GetClassInfoA
CharUpperBuffA
DrawStateW
GetClassInfoExW
WindowFromPoint
comdlg32
CommDlgExtendedError
GetSaveFileNameA
GetSaveFileNameW
Exports
Exports
?AckXmxR@@YGED@Z
?naAbmxqzbi@@YGGE@Z
?fQyjgGqflMSpEj@@YGX_N@Z
?BauGxOakf@@YGPADPADK@Z
?HicchFCaxewliTVbfraqxe@@YGHHF@Z
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 512B - Virtual size: 156B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ