P:\sqmzxuo\iPSkZWrIp\nvOwzqdatzxim.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a4d88ba01ab52a0ac043fe45722a6447_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a4d88ba01ab52a0ac043fe45722a6447_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a4d88ba01ab52a0ac043fe45722a6447_JaffaCakes118
-
Size
153KB
-
MD5
a4d88ba01ab52a0ac043fe45722a6447
-
SHA1
773c5ef45898024d1c3e66540dcc327ee3fa0ad8
-
SHA256
a90565e16edf25c8b75866aeb676a9e5219c5a1d4a9ceac722871345d0b3dda2
-
SHA512
678e0497eee0b7bd7bdec14943644daf27aa97357c4e003af9ba5bbf8398479285311bb8fc13e2d03e8c96699209c9e69b8015249dc02d630fa35141db0592d3
-
SSDEEP
3072:ZPOGAjltX0dJQzhG88yvUK9satIFteZ9Qlps8G0r0H/cdSbwe3:1Oljz0Yzhi/asa9ZKlps8GFYs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4d88ba01ab52a0ac043fe45722a6447_JaffaCakes118
Files
-
a4d88ba01ab52a0ac043fe45722a6447_JaffaCakes118.exe windows:5 windows x86 arch:x86
318d6316cf960a89fc9de469085e11b7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
FindWindowW
OffsetRect
IsWindowEnabled
SetFocus
GetClientRect
AdjustWindowRect
ntdll
RtlCompareMemory
kernel32
FileTimeToSystemTime
SetCommState
GlobalDeleteAtom
EnumResourceNamesA
FindResourceW
GetNumberFormatA
lstrcatW
GlobalReAlloc
GetLastError
GlobalGetAtomNameA
VirtualFree
GetTimeFormatA
TlsGetValue
Exports
Exports
?FileIsMove
Sections
.text Size: 150KB - Virtual size: 149KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE