O:\iwyzRwVClhhs\npPxqzdJle\sHyzcMBurWgRAa\wjrJodMgur.pdb
Static task
static1
Behavioral task
behavioral1
Sample
abe803f0fd10e85a5b5c7777d92671ea_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
abe803f0fd10e85a5b5c7777d92671ea_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
abe803f0fd10e85a5b5c7777d92671ea_JaffaCakes118
-
Size
149KB
-
MD5
abe803f0fd10e85a5b5c7777d92671ea
-
SHA1
8c0ff8bcc05cd259d7db9a220518600042724d87
-
SHA256
f824f5f482e2367cea695405a3918e6882813e2086c5177ca35db15061134069
-
SHA512
00bd7597b7bad0f37e106d5ee80aa4c349db1f51c2a2e370856b792bb3fac76910ce927b728069fb56ea1f9a5f30cde9ca2ac9d579d9a347a4ee7794f3c3ebb1
-
SSDEEP
3072:N7Apl+zZNRqodzv3oKBznxMvfw1sPDVbDGT0keMVc:KYzPpYimvFDVfy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abe803f0fd10e85a5b5c7777d92671ea_JaffaCakes118
Files
-
abe803f0fd10e85a5b5c7777d92671ea_JaffaCakes118.exe windows:5 windows x86 arch:x86
52d51f240f8dd5f18a9a11d2c7bb0c7c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
realloc
_controlfp
__set_app_type
__p__fmode
__p__commode
_amsg_exit
_initterm
_ismbblead
_XcptFilter
_exit
_cexit
__setusermatherr
__getmainargs
localtime
kernel32
LoadLibraryW
SetThreadContext
GetTempFileNameA
DeviceIoControl
SetEvent
GetModuleFileNameA
VerSetConditionMask
GetModuleHandleA
gdi32
CombineRgn
GetObjectW
SaveDC
GetCurrentObject
DPtoLP
GetTextExtentExPointW
shlwapi
StrRChrA
user32
GetKeyNameTextW
DrawTextExW
IsWindow
wsprintfA
GetClassLongA
SendMessageA
GetMenuItemInfoW
Exports
Exports
?CreateDlgMessage@@YGHPAXPADK|U
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 124KB - Virtual size: 255KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE