L:\vswsXYaN\YKLskkk\pSjKa.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b02ed27c2234ef4463e6854ca6cc6b66_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b02ed27c2234ef4463e6854ca6cc6b66_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b02ed27c2234ef4463e6854ca6cc6b66_JaffaCakes118
-
Size
201KB
-
MD5
b02ed27c2234ef4463e6854ca6cc6b66
-
SHA1
bff1e6f7051f5aa62974ef2daed3f74c0618e422
-
SHA256
c18e2efa0040bf261db0be02a78e13a58c8b465f69540990347133968afb8e92
-
SHA512
9f49a76f4b9c966c1df434cec2fc56857a3fab4247f40d6eb9281d5e453021563eeadf9bad2c5fc7fa74a3806512abe9a90d61a85f36254d16fcc87aacef1885
-
SSDEEP
3072:DwmKRhtpUnPM3IFcuoZX9yOzQeD3fyVE/HFrALIg+P7X5LxpnSiig88TyZKGlvN9:DwaM3WcuoZX9ByVsg+b1xBSiiisNx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b02ed27c2234ef4463e6854ca6cc6b66_JaffaCakes118
Files
-
b02ed27c2234ef4463e6854ca6cc6b66_JaffaCakes118.exe windows:5 windows x86 arch:x86
ddbc349dd2d8ad26160c0b067333e54c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
LineTo
CreateHalftonePalette
DPtoLP
SetTextAlign
GetTextAlign
SetROP2
CreatePalette
GetObjectW
user32
ExitWindowsEx
GetCaretBlinkTime
GetFocus
EnableScrollBar
TrackPopupMenuEx
GetKeyState
MapVirtualKeyExA
GetForegroundWindow
DrawTextW
SendDlgItemMessageW
MapWindowPoints
GetClassInfoW
CharUpperW
VkKeyScanW
kernel32
TransactNamedPipe
GetModuleFileNameW
GetUserDefaultLangID
GetFullPathNameA
GetUserDefaultUILanguage
FormatMessageW
EnterCriticalSection
MoveFileW
DeleteAtom
GetProcAddress
lstrcmpiA
SetLocalTime
OpenMutexW
FindClose
comctl32
CreateStatusWindowW
ImageList_AddMasked
ImageList_Write
ImageList_Read
shlwapi
ChrCmpIW
PathRemoveArgsW
Exports
Exports
?gqpyNqucqhO@@YGMED@Z
?gtBqZhvoooxT@@YGMPAE@Z
?GYfIeQuvomkvpJuhdv@@YGDPAE@Z
Sections
.itext Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 70KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ