J:\juCtd\vwRQl\mCef\oKcQ\zxzTh.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a34ea9331efc0430cb10bcb4909184d1_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a34ea9331efc0430cb10bcb4909184d1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a34ea9331efc0430cb10bcb4909184d1_JaffaCakes118
-
Size
170KB
-
MD5
a34ea9331efc0430cb10bcb4909184d1
-
SHA1
857d7b6fd9d9563c42d98ae843f0ba8a12a0fe93
-
SHA256
2f63c7e4868d6af6c24a975c7c44fbc2c66c405447b7e882582df023a6f7cd25
-
SHA512
cd16409b0d7b8158e0fc4fff266b6e60b5af4e3dddf3bf09424997b42fe8875c0e4cc0ccca6c6ee83592499d3d7f4578ab0c18fbb9100a464463f87f85934d18
-
SSDEEP
3072:FQqWLGWIfa6FQ2E5pln5vpKeI8xWcLwoLpPOETgUYRYF0p2iIc:FqGF8jI8Yc0oLpPOlFzw7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a34ea9331efc0430cb10bcb4909184d1_JaffaCakes118
Files
-
a34ea9331efc0430cb10bcb4909184d1_JaffaCakes118.exe windows:5 windows x86 arch:x86
c9b7ce9ac35af6218dfba720703b58cb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
GetMessageTime
SetWindowPos
ReleaseDC
SendDlgItemMessageA
LoadIconA
GetAsyncKeyState
SetDlgItemTextW
CloseDesktop
SetLastErrorEx
GetDCEx
GetCursorPos
RegisterClassExA
CreateDialogParamA
kernel32
Sleep
SetEvent
CreateSemaphoreA
GlobalLock
ClearCommBreak
GetStartupInfoA
shlwapi
PathMakePrettyW
IntlStrEqWorkerA
StrCpyW
StrCmpNIW
PathCommonPrefixW
comdlg32
GetSaveFileNameW
CommDlgExtendedError
gdi32
Ellipse
CreateSolidBrush
GetTextColor
CreateRectRgnIndirect
SetPixel
GetNearestColor
Exports
Exports
?UeHjaSvzzfwgsUagJS@@YGPAFPAM@Z
Sections
.itext Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 139KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 95B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ