L:\ffLvQfD\qvrmn\sreaQPx\irWl.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a3fa2ee15432e29955466c08b7c9f3c9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a3fa2ee15432e29955466c08b7c9f3c9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a3fa2ee15432e29955466c08b7c9f3c9_JaffaCakes118
-
Size
190KB
-
MD5
a3fa2ee15432e29955466c08b7c9f3c9
-
SHA1
3bbde2b8600e2bee0b61a173d054a02f6463c629
-
SHA256
71193f7f76c9000927f3746a467164a76af3be3c0ff40d696e5644dfdae4837d
-
SHA512
2116e13dd6d6e3ba5527459891361a445cf899b4e5b49dcda793ecdd85c514941f158bac68077780d27b12887bbcb7049143fbeaca8b8fc58760fa5754c8507d
-
SSDEEP
3072:WXakoBnxzyb8qrDqysh4LjRgFNFKRunyKiOnz2R8gyKCm+q1hgrEa7v:iSBnxz2DXqNh2RgFNoRunyKisza3X+Yy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3fa2ee15432e29955466c08b7c9f3c9_JaffaCakes118
Files
-
a3fa2ee15432e29955466c08b7c9f3c9_JaffaCakes118.exe windows:5 windows x86 arch:x86
6f13e39fc24b87e2f187b6ba0a2624a3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
StretchDIBits
StartPage
TextOutA
SetDIBColorTable
GetROP2
TextOutW
GetTextExtentPoint32A
CreateCompatibleDC
CreateRoundRectRgn
kernel32
EnumResourceTypesA
EnumResourceNamesW
HeapReAlloc
Sleep
MulDiv
SetEndOfFile
GetSystemDirectoryA
GetProcAddress
GetCommTimeouts
LoadLibraryW
lstrcmpiW
GetFileAttributesA
SetThreadPriority
SetHandleCount
user32
ShowOwnedPopups
GetWindow
EnumThreadWindows
CopyImage
InSendMessageEx
PostThreadMessageA
CharUpperA
CharUpperBuffA
GetMenuStringW
GetWindowLongA
WindowFromPoint
GetScrollPos
GetSysColorBrush
Exports
Exports
?baizJEElcsmtcNy@@YGPAGI@Z
?amxvcxglui@@YGPAKE@Z
?bKyiPgqKwo@@YGXGPAK@Z
?ZpRmvqxtomt@@YGXPAK@Z
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 916B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 151KB - Virtual size: 227KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ