H:\ZxLv\yilyhK\mnAtDnRs\USUacdlN\asQcJlh.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a3d6dc314921bd385f642d6ed57dc5ee_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a3d6dc314921bd385f642d6ed57dc5ee_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a3d6dc314921bd385f642d6ed57dc5ee_JaffaCakes118
-
Size
134KB
-
MD5
a3d6dc314921bd385f642d6ed57dc5ee
-
SHA1
decda43b0e57e63bc7f08da9119c057c56699377
-
SHA256
c292df06a2fd3fe391f0b06162c1e90d21d54c65d8c3b22fc7b86e3183b67543
-
SHA512
ee0b73e8b8bc7104a6086aedcc9bab149fde59101bb9a5db146863a846f7c7f1931e491d9cc582570d9b4adb8e11feec93021e3c4bbd3872172664a15e94e889
-
SSDEEP
3072:qhpxH1qrM7EurY+GvIsdGkgWjV3T83mhhjkMDx52XNNgrJm:AxVqPGY/DiOV3YmhpDQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3d6dc314921bd385f642d6ed57dc5ee_JaffaCakes118
Files
-
a3d6dc314921bd385f642d6ed57dc5ee_JaffaCakes118.exe windows:5 windows x86 arch:x86
ee65683bc506e4888d5514e879c45f2a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
SetWindowTextW
GetKeyState
DragObject
LoadCursorA
GetMenuStringA
MonitorFromRect
wsprintfW
CreatePopupMenu
SetWindowTextA
ReplyMessage
CloseDesktop
AdjustWindowRect
LoadAcceleratorsW
comctl32
ImageList_Create
ImageList_GetIconSize
ImageList_Destroy
CreateStatusWindowW
kernel32
GetUserDefaultUILanguage
LoadLibraryA
VerSetConditionMask
CreatePipe
GlobalFindAtomW
GetProcAddress
GetTickCount
GetVersion
GlobalMemoryStatusEx
GetStartupInfoW
MoveFileA
GetModuleHandleA
comdlg32
ChooseFontW
PageSetupDlgW
ChooseColorW
PrintDlgExW
shlwapi
StrCmpIW
gdi32
OffsetViewportOrgEx
SetPaletteEntries
GetTextMetricsA
EnumFontFamiliesExW
RestoreDC
CreateHatchBrush
Exports
Exports
?MhipeObhjWp@@YGHDPAE@Z
?vidxMJpodwEgK@@YGMJ@Z
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 1024B - Virtual size: 636B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ