C:\qvFbx\AdjlI\qrkep\jqxbCg\hPmW.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ac0f94d6e6a3e88ea5f19cc75c1016af_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ac0f94d6e6a3e88ea5f19cc75c1016af_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ac0f94d6e6a3e88ea5f19cc75c1016af_JaffaCakes118
-
Size
110KB
-
MD5
ac0f94d6e6a3e88ea5f19cc75c1016af
-
SHA1
f783759f2d82814ad8ea4feba75835ccc5e6f4ac
-
SHA256
4285e859483d7f612d7d0b85a1621b3047d729e8c938e2d00a454c0eba563bb8
-
SHA512
df65ef7a909897ddc46e21f6b0985fcb86446309f1552fdefde5c7267013aadc57fc5a659a1e6c13ac97948a00f2c878351186c1e3d95b9e5f8f44aa5476a7bd
-
SSDEEP
3072:cYgyjgrMbDoZZvhKb79vnSjgjunQhOKJVetLRl+Yl:BjgrXDpK/RagjuQNJVeNiM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac0f94d6e6a3e88ea5f19cc75c1016af_JaffaCakes118
Files
-
ac0f94d6e6a3e88ea5f19cc75c1016af_JaffaCakes118.exe windows:5 windows x86 arch:x86
4dbb5ba322c0ce3b8e282fb7246bb624
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
lstrlenW
FileTimeToSystemTime
lstrcmpiW
GetLastError
GetCommModemStatus
OpenEventW
GlobalAddAtomW
LoadLibraryW
GetProcAddress
lstrcmpW
GetFileAttributesExA
GetFileInformationByHandle
SuspendThread
gdi32
SetBitmapDimensionEx
MoveToEx
GetSystemPaletteUse
SetAbortProc
SetDIBits
CombineRgn
user32
DefWindowProcA
SetScrollInfo
GetAsyncKeyState
ShowScrollBar
RegisterClassW
AdjustWindowRectEx
GetDlgItemTextW
GetPropW
PostThreadMessageA
IsCharUpperA
GetWindowTextW
GetWindowLongW
DrawAnimatedRects
RegisterClassA
shlwapi
StrCmpNW
Exports
Exports
?vuvfgekN@@YGXPAKE@Z
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 914B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ