P:\oIQnqAds\qMpWZZlCaEoMc\RrbwvyFa\cbuawVach\yFhzfGnknzDJs.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ae2b679fa4b729e9262ea74cf613008d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ae2b679fa4b729e9262ea74cf613008d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ae2b679fa4b729e9262ea74cf613008d_JaffaCakes118
-
Size
169KB
-
MD5
ae2b679fa4b729e9262ea74cf613008d
-
SHA1
4174312ca980d6081db5d1ab1c82f7408f05d216
-
SHA256
0e6469e6b92fd6df461f80801ffdc9424a548e1842d46850505a4ca5f0fb4bfb
-
SHA512
93aeed2a8809b2c11399c8f9037cf531ea609832734f8e7e718ef91cec85be3c9aca4f14d4dde1664c7eeb08c5549d25fac74640dce2d226d789e31bc049b2c9
-
SSDEEP
3072:4Si7WzuXiRNIS4We8OtOmtZE4FzveYvHRfmMnJvw51ffM4c51zTZH/s:/FDNIs0tOmBF9vHZNnJ81XQnZU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae2b679fa4b729e9262ea74cf613008d_JaffaCakes118
Files
-
ae2b679fa4b729e9262ea74cf613008d_JaffaCakes118.exe windows:5 windows x86 arch:x86
ca514bfb66cdd5260bd729cd7f7fecad
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetLocaleInfoW
ResumeThread
GlobalFree
FreeResource
QueryDosDeviceW
GetComputerNameExW
MulDiv
shlwapi
PathUnmakeSystemFolderA
advapi32
RegQueryValueExA
RegQueryValueExW
RegReplaceKeyA
user32
ShowCursor
SetCursorPos
GetTopWindow
IsWindow
GetClientRect
IsWindowUnicode
GetFocus
OffsetRect
MessageBeep
ntdll
RtlCompareMemory
Exports
Exports
?InsertFil
Sections
.text Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fxc Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fx Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ