N:\eNbmmq\Pufyb\JobSeC.pdb
Static task
static1
Behavioral task
behavioral1
Sample
accaebb4b0fa5021289fb5aac9fe7d18_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
accaebb4b0fa5021289fb5aac9fe7d18_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
accaebb4b0fa5021289fb5aac9fe7d18_JaffaCakes118
-
Size
112KB
-
MD5
accaebb4b0fa5021289fb5aac9fe7d18
-
SHA1
d6e5833432e493d60ecee250a72c82afd9d52c71
-
SHA256
b746108bc5a00648beec0a241223daeb48817222c1270ae119f1e2d7831d6a1e
-
SHA512
6148ccc3dd3fd82991b5c3547aa0e0272b8a439a3e9ea9e5c289476891627117d6672b3dacb1b04bcbab9e9f3622b05105dc187f4b22fe30dc12d72e569c63da
-
SSDEEP
1536:epVrgzLx3dYn9eqbVx5GKj3M4aPfQNT1kRP9LuqEcBtz/BVQW1XCM7/QzqUrEsC7:S9QFqRYrEIVNd11yM7o8sCFXt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource accaebb4b0fa5021289fb5aac9fe7d18_JaffaCakes118
Files
-
accaebb4b0fa5021289fb5aac9fe7d18_JaffaCakes118.exe windows:5 windows x86 arch:x86
192fea9b1e7b10c9330c6958c3b1d2a9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
GetPropW
GetKeyboardLayoutList
LoadBitmapW
SetCursor
LoadCursorA
PostThreadMessageA
ShowScrollBar
GetScrollInfo
GetWindowLongW
GetWindowDC
CopyImage
IsCharUpperA
comdlg32
GetOpenFileNameA
GetSaveFileNameW
shlwapi
StrCmpNW
kernel32
ReadFile
EnumResourceLanguagesA
lstrcmpiW
ExitThread
GetProcAddress
lstrlenW
SetErrorMode
LoadLibraryW
CreateMailslotW
CompareStringA
FindCloseChangeNotification
GetVersion
gdi32
CreatePen
CreateHalftonePalette
AddFontResourceW
CreateICW
PolyBezier
RestoreDC
SetTextAlign
GetDIBColorTable
PatBlt
Exports
Exports
?umrKfonszgkgbD@@YGH_N@Z
?HuoKbudNmIhjgMTts@@YGPAEPAH@Z
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 964B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 133B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ