N:\otzqNz\zeIvri\ruxhuen.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b2c28364dbb5e17f8d0fef4d319f406a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b2c28364dbb5e17f8d0fef4d319f406a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b2c28364dbb5e17f8d0fef4d319f406a_JaffaCakes118
-
Size
112KB
-
MD5
b2c28364dbb5e17f8d0fef4d319f406a
-
SHA1
0f9f36d4025a012366e4ffdaba49c9b1083e9064
-
SHA256
b2928af94805e43c79b87023f704d968e63f5d0113451523cbbba25ef8d82ed7
-
SHA512
a93af91b2230feab14e71362d4dc0999cb5a830e5fe813464068fa413a6f77710c3e5175760f4b356d3bd259d8dc167b19429c0e6d1c5a9fb598566e1f949707
-
SSDEEP
1536:Nw7pBCUT7x8XB7XjacZ6XDqUX76zdtVkplFvvbbppS5JXQ1doQe0KgluZ3Ag4393:N2BIX1TZC9StVkvbrSbQ1dxe5pIrs6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2c28364dbb5e17f8d0fef4d319f406a_JaffaCakes118
Files
-
b2c28364dbb5e17f8d0fef4d319f406a_JaffaCakes118.exe windows:5 windows x86 arch:x86
cd277326e7ffe0b64d9aefdd023bec95
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
CreateStatusWindowW
PropertySheetW
kernel32
LoadLibraryW
GetTimeFormatA
GetProcAddress
lstrcmpiW
FormatMessageA
GetExitCodeThread
lstrlenW
GlobalMemoryStatusEx
CreateSemaphoreA
ConvertDefaultLocale
CreateNamedPipeW
CreateFileMappingW
SetCommMask
gdi32
Polyline
SaveDC
SetPixel
CreatePatternBrush
GetStockObject
Rectangle
CreateHatchBrush
GetTextColor
comdlg32
GetOpenFileNameW
PrintDlgExW
user32
GetPropW
GetWindowLongW
DrawIcon
IsCharUpperA
LoadCursorA
ShowScrollBar
HideCaret
GetKeyboardType
SetParent
DestroyIcon
RemovePropW
ShowWindow
shlwapi
StrCmpNW
Exports
Exports
?ipjwbZz@@YGPA_NPAIPAM@Z
?SlyslIoPbeojov@@YGJDK@Z
?qszyBhsocbJlBfofcjv@@YGHN@Z
?nnWucuaanbNvoW@@YGPA_NPAM@Z
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 205B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ