V:\aelvmfk\ZYVeaw\yhyh\ZdcnLi.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ac747b705909a21cdb864262d09c4f68_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ac747b705909a21cdb864262d09c4f68_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ac747b705909a21cdb864262d09c4f68_JaffaCakes118
-
Size
140KB
-
MD5
ac747b705909a21cdb864262d09c4f68
-
SHA1
013a20e9582575fc2a26b96a4f2c65ae3077e5d9
-
SHA256
e1aed6369432a12c0cc4418c3268a64f0df8bc694a3deabf4d551db5796835ea
-
SHA512
7e66016a5896bce4119c5ae954fa3854f3ef5a8820e818081f6a6c5b5ff0c3db4cd105236661b3e7a7e487a54773010729176ed7a5c970fc8dbbbe65ec707690
-
SSDEEP
3072:VCrYGiFA2YdJN5MSypLAtEqu6qFIWBJXI+ADd2gT//v:3G92sfMPaE2IODAC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac747b705909a21cdb864262d09c4f68_JaffaCakes118
Files
-
ac747b705909a21cdb864262d09c4f68_JaffaCakes118.exe windows:5 windows x86 arch:x86
1332f51f10e204a32ba9fd9bc6172929
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
UrlGetPartA
StrTrimW
gdi32
GetTextExtentPointW
GetTextMetricsW
RoundRect
CreatePolygonRgn
PathToRegion
CreatePenIndirect
user32
GetCursorPos
IsCharUpperA
GetWindowPlacement
RegisterHotKey
IsCharAlphaW
CharNextA
GetPropW
IsWindow
CreateCursor
TranslateAcceleratorA
CheckDlgButton
IsWindowUnicode
comdlg32
GetSaveFileNameW
GetFileTitleW
GetSaveFileNameA
kernel32
GetTickCount
LCMapStringA
LoadLibraryExA
CreateFileMappingA
DefineDosDeviceW
FindResourceA
TerminateThread
Exports
Exports
?OAWOsqxawHMFQxb@@YGPADPAE@Z
?aP_gqdlfimJNHM@@YGKPAGPAM@Z
?_CK_BHDQYJL_@@YGPAHIK@Z
?X__V_TJBG_P_AIj_mULz_@@YGKPA_NF@Z
?psjwpREAfufke_xv__@@YGMHPAE@Z
?voww_lzgt@@YGDPAF@Z
?lpTWobwdY@@YGEPANPAI@Z
?_fo_zzht@@YGEPAF@Z
Sections
.text Size: 51KB - Virtual size: 210KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idat Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pacdat Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ