X:\brBpB\hXzzizen\twugjjfb.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ae1a319e6d0af82680f9472dce78019d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ae1a319e6d0af82680f9472dce78019d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ae1a319e6d0af82680f9472dce78019d_JaffaCakes118
-
Size
109KB
-
MD5
ae1a319e6d0af82680f9472dce78019d
-
SHA1
0ed453135eedce382ed67b6f1f11a5611a423e75
-
SHA256
d7e915587e05e0df1580e03c007aed907e77d194a7758565ba76cdc80c6e1697
-
SHA512
ed503c31fca9fbaa736637fc226fbfb1eecbf5a2d9476d8e26dc43abba5ebf202e0ab6befc09e3465e2b9ea56774e1ac820674ac751d2cc85fa3b8b474c177cb
-
SSDEEP
1536:F0jKzBIja37Z0E4NnNsCzyDR+CNMkd+Bbm/UTEJ8aUMx+DtNjcSC5wjwFrdJw68:5BcGZ0LZyIyDR+Gd+pafUMx+/8wjw7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae1a319e6d0af82680f9472dce78019d_JaffaCakes118
Files
-
ae1a319e6d0af82680f9472dce78019d_JaffaCakes118.exe windows:5 windows x86 arch:x86
0c1fa468e74af754245c124593cbe265
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
GetMenuContextHelpId
GetWindowLongW
ShowScrollBar
FindWindowW
GetPropW
GetScrollRange
SetRect
GetDialogBaseUnits
AttachThreadInput
DrawEdge
SetDlgItemInt
ClipCursor
IsCharAlphaNumericA
gdi32
SetBitmapDimensionEx
AddFontResourceW
Polyline
GetROP2
CreatePolygonRgn
Escape
CreateRectRgn
CreateFontIndirectA
GetLayout
kernel32
SetSystemTime
lstrcmpiW
lstrlenW
GetProcAddress
SetThreadExecutionState
ConnectNamedPipe
HeapFree
CreateThread
SetCommMask
GetFullPathNameA
MoveFileExW
LoadLibraryW
shlwapi
StrCmpNW
Exports
Exports
?yzMvAjQODjEwhtguu@@YGPAEE@Z
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 906B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ