O:\cegxrd\uUgbq\BOzfMkp\yLjmvB\oZBCfIs.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a1c7037e87e2b50b56580b017e737129_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a1c7037e87e2b50b56580b017e737129_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a1c7037e87e2b50b56580b017e737129_JaffaCakes118
-
Size
118KB
-
MD5
a1c7037e87e2b50b56580b017e737129
-
SHA1
38c10e52500d129b7b71291105d945f5083f4d6d
-
SHA256
1fd7f224ddddba91ea76608fd1da92b15203557bf27ead414d08cc49a54b3d5a
-
SHA512
228e2879ade31363b77acf3be0fb58bbceff100fed8b987b459a8a8200e68854a97c48a5339b3d2586100a71defb8463e74a9c3acf13f2e9d278d57f31610632
-
SSDEEP
3072:K8pS9M+s1wv56dWMaEn9YXxQPpOL61IAlzOZdUBY7C9Y:J1ZdWMaEnCSO4lz+dUBW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1c7037e87e2b50b56580b017e737129_JaffaCakes118
Files
-
a1c7037e87e2b50b56580b017e737129_JaffaCakes118.exe windows:5 windows x86 arch:x86
d46ceccadedc5c5a967a3133081ac8ab
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
GetWindowRect
GetScrollPos
GetCaretPos
wsprintfW
SendMessageA
ActivateKeyboardLayout
SetUserObjectInformationW
FindWindowW
InvalidateRgn
GetMenuInfo
GetDlgCtrlID
CheckMenuItem
SetScrollPos
DrawStateW
CharPrevW
kernel32
GetCommConfig
SetCommBreak
lstrcmpA
GetTempFileNameW
EnumResourceLanguagesA
lstrlenA
FindResourceW
CreateFileMappingW
SetThreadContext
RaiseException
FindClose
GetShortPathNameA
lstrlenW
gdi32
CreateFontW
EndPath
EnumFontsW
ScaleWindowExtEx
CreateRoundRectRgn
CreateFontIndirectW
SetDIBits
GetMapMode
IntersectClipRect
comctl32
ImageList_Write
ImageList_Draw
shlwapi
PathGetArgsW
StrCatBuffW
Exports
Exports
?BgILxqrmerXNtiES@@YGPADIJ@Z
?lDyatrrj@@YGDFJ@Z
?uyeNDuzXvll@@YGFPAN@Z
?LfwxQexkwSnCDxesJil@@YGXFPAG@Z
?oefkuDgoJGkTC@@YGGMK@Z
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1024B - Virtual size: 746B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ