C:\frkynaBe\fmui\tZuvd\ukayx.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a57962b3655aa5b1c06be6b68cdfc63a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a57962b3655aa5b1c06be6b68cdfc63a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a57962b3655aa5b1c06be6b68cdfc63a_JaffaCakes118
-
Size
142KB
-
MD5
a57962b3655aa5b1c06be6b68cdfc63a
-
SHA1
70768ee6bb1cc7ed061fbdd33297e2b633ac6e1a
-
SHA256
a81c66b0d86d18aee762b4c8073893a75846c4b252ff9f5d6c04ec948e5c9f0a
-
SHA512
4b798943bf199519ab11a92e22c0cd19cba17c62534b07e6e65758db68ab236e33308a1c2da000d5ee0dea5e4968bb9d42dbae82907f53afc97599e3d21a29ef
-
SSDEEP
3072:lkmiPUsQbtkR5BigPWVIXXrogRPDCqJFN++mhQQWD3zxOkzCza:l1fsvilVIXXrPfFvmz099C+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a57962b3655aa5b1c06be6b68cdfc63a_JaffaCakes118
Files
-
a57962b3655aa5b1c06be6b68cdfc63a_JaffaCakes118.exe windows:5 windows x86 arch:x86
b7615b946b023ef7fc8936c5fb68e1a0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
RoundRect
GetTextExtentPointW
RestoreDC
CreateDiscardableBitmap
ExcludeClipRect
GetSystemPaletteUse
shlwapi
StrCatBuffW
user32
DispatchMessageW
SetWindowTextA
DialogBoxParamW
EqualRect
CharUpperW
GetMenuItemRect
BringWindowToTop
PostMessageA
wsprintfW
CharPrevW
GetScrollRange
LoadCursorW
GetPropW
GetWindowTextLengthW
kernel32
SetErrorMode
GlobalMemoryStatusEx
CreatePipe
lstrlenW
TlsSetValue
FormatMessageW
HeapSize
WaitForSingleObjectEx
CancelWaitableTimer
GlobalGetAtomNameW
SetFileAttributesA
Exports
Exports
?cdCtOhKk@@YGDGJ@Z
?lRhIoUlc@@YGHPAI@Z
?iNekkavimP@@YG_NPAEPAM@Z
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 878B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 285KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1024B - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ