B:\kmTkt\KhalEdc\nzcjQg.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a235c04827071f657960fc958b180900_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a235c04827071f657960fc958b180900_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a235c04827071f657960fc958b180900_JaffaCakes118
-
Size
111KB
-
MD5
a235c04827071f657960fc958b180900
-
SHA1
d8e290fe882903258a486f09f5cc725c380cb13c
-
SHA256
73098d19612ad4118c86df53e5ee9c97cacfeb1a883b41feeb1bf04f5c294acd
-
SHA512
ed9d88df098f4fb24793ea1904347a3b0aab8ab0256712f3287e4b1d56108fad61e6180b636a8fdd0d83d9557bef048ab05e847bc3960657bd5ca124eadeb697
-
SSDEEP
1536:l3X7DFXxzFo8rFoDxmT+7H+f4HGXJoihcIDlE/qsY9VX/CK+mg4fr1AgBhuy:5l9+DxmTX+GXJoxXwHXtg4fB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a235c04827071f657960fc958b180900_JaffaCakes118
Files
-
a235c04827071f657960fc958b180900_JaffaCakes118.exe windows:5 windows x86 arch:x86
0ca6c6e07dc5636d57e58fbb4acbe86f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
lstrlenW
WaitCommEvent
DeleteAtom
LocalFree
MulDiv
GlobalGetAtomNameW
HeapFree
GetModuleFileNameW
FileTimeToDosDateTime
GetComputerNameA
LoadLibraryW
GetProcAddress
lstrcmpiW
user32
IsCharUpperA
CreateWindowExW
TrackPopupMenuEx
DestroyCaret
GetWindowLongW
GetActiveWindow
GetPropW
LoadMenuW
IsDialogMessageW
SwitchToThisWindow
SetTimer
ShowScrollBar
shlwapi
StrCmpNW
gdi32
GetNearestPaletteIndex
GetStockObject
SetPaletteEntries
RoundRect
GetTextExtentPointW
SetRectRgn
SelectObject
Exports
Exports
?kqcSausaLj@@YGPAJK@Z
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 868B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 89B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ