E:\bfwyZJ\bsgfwW\Rjzx.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b012364a00e1790582a079684fedf0ee_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b012364a00e1790582a079684fedf0ee_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b012364a00e1790582a079684fedf0ee_JaffaCakes118
-
Size
160KB
-
MD5
b012364a00e1790582a079684fedf0ee
-
SHA1
e8e250a7b38c047ea464af271cf6b832b22dddb1
-
SHA256
7b8651bf1480d58b80741932b3f2cefd3234964c2213247730afc8455d532ad8
-
SHA512
539892c5bf722f9e2b1a137bf73c2797f7fa65965f4c80b2ae519f59c24cffe3e54d548ef14b0949b4396dc57b2f81b2e0aca9cb5e8c9ad12f221d2a7dedbc66
-
SSDEEP
3072:S/Z8+ahAl55JbelEcMsToiola+fjyCrVsohdW+n7PePi1ctQxV:Sx8+ahw5/brooipIrV917GamQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b012364a00e1790582a079684fedf0ee_JaffaCakes118
Files
-
b012364a00e1790582a079684fedf0ee_JaffaCakes118.exe windows:5 windows x86 arch:x86
b673561c02304f1c6f1bf6cac89db516
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
StrToIntA
UrlGetPartW
StrCpyW
gdi32
GetViewportOrgEx
SetRectRgn
GetTextFaceW
AddFontResourceW
SetViewportOrgEx
GetPixel
kernel32
SetUnhandledExceptionFilter
DeleteFileW
GetTempPathW
GetComputerNameA
lstrcpyW
lstrcmpW
lstrcmpiA
SetCommMask
ExitProcess
lstrcmpiW
user32
GetTopWindow
SetTimer
DrawAnimatedRects
SendDlgItemMessageA
GetScrollInfo
SetClassLongW
GetSubMenu
mouse_event
FillRect
GetMonitorInfoW
ClientToScreen
SetMenuItemBitmaps
wsprintfA
ToUnicodeEx
Exports
Exports
?jfohnwtmugwuq_m@@YGPAEHPAE@Z
?_flLYCAG@@YGPADPAMPAK@Z
?HYXFQVN_@@YGHPAE@Z
?sxLSG_S@@YGXFI@Z
?u_pjdi_xni_rJ@@YGJPAI_N@Z
Sections
.text Size: 56KB - Virtual size: 387KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idat Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pacdat Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ