O:\eybdxzs\EociRXV\eQios.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a251084652a0c8a0a41a5ba673d4ff6c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a251084652a0c8a0a41a5ba673d4ff6c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a251084652a0c8a0a41a5ba673d4ff6c_JaffaCakes118
-
Size
124KB
-
MD5
a251084652a0c8a0a41a5ba673d4ff6c
-
SHA1
06ca6d4ddba4580af126fc087121781535c81a19
-
SHA256
d561ade0ff6c31248d02ac2abff3d4a73291a413b98b3faef30d65f456a246a4
-
SHA512
0b9c4749dd60cfade5917b13a8b86c6db7ec5aa8e4c512c43938c212670bd9783e480942b9661f28784bede50aa6ff0af957540d0e5d06a4adf697a21a382995
-
SSDEEP
3072:yHSFme+TDNR5Zk5KFnrd1SmyL8KNzQfD4VNRiUwTNJTd:yyFme+l3ymMxEfEVNcT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a251084652a0c8a0a41a5ba673d4ff6c_JaffaCakes118
Files
-
a251084652a0c8a0a41a5ba673d4ff6c_JaffaCakes118.exe windows:5 windows x86 arch:x86
124e12cbb6d82b88812d2db246ea9dbd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
ImageList_Read
ImageList_Remove
ImageList_GetIconSize
kernel32
FileTimeToLocalFileTime
RaiseException
GetVersion
GetOverlappedResult
GetTimeFormatA
SetFileApisToOEM
lstrlenW
OpenEventW
SetCommTimeouts
FindClose
Sleep
SetTimerQueueTimer
SetThreadPriority
user32
DrawEdge
GetMenuItemRect
EnumThreadWindows
GetWindowTextLengthW
GetMenuStringA
ValidateRect
SetWindowTextA
DrawStateA
SetActiveWindow
GetSysColor
GetParent
wsprintfW
shlwapi
StrCatBuffW
StrCmpW
gdi32
MoveToEx
SaveDC
GetTextColor
SetLayout
GetNearestPaletteIndex
LineTo
PtVisible
Exports
Exports
?GyuPflygx@@YGFPAND@Z
?axecaFmPiVkaaQFbFcD@@YGPAFIPA_N@Z
?mqZJIxhcglDKzmltrL@@YGFF@Z
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 988B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ