K:\kvkyw\ljjd\irbuhkf.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b3397477ae0a0a0ba9dbc3108ba6e0ec_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b3397477ae0a0a0ba9dbc3108ba6e0ec_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b3397477ae0a0a0ba9dbc3108ba6e0ec_JaffaCakes118
-
Size
190KB
-
MD5
b3397477ae0a0a0ba9dbc3108ba6e0ec
-
SHA1
5eda428b47502fa2fcd993b12c188845d63493db
-
SHA256
c0755ba910d2676a97756d9e20cd01ef86bdce3455026a838b0b142833feb6c9
-
SHA512
99e9092c0e74c923dd9fc055606cc8a561f7728d58ae4a7c3267caa88a15054813a5cd8f1391ccb420dca54d88bc4730745fe436cb16948527b285298a790566
-
SSDEEP
3072:OkkVexiDYyvPMDGNKz1ZnZUrmmHteJokNb1uV0lCU1Ys5zdoPmWYx4UP:xkVepQ0DGNIZUrhHKNb1uVOCO55rWYm+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3397477ae0a0a0ba9dbc3108ba6e0ec_JaffaCakes118
Files
-
b3397477ae0a0a0ba9dbc3108ba6e0ec_JaffaCakes118.exe windows:5 windows x86 arch:x86
f6b3e284a75a18b0215acc4a2cbe768e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
PathIsDirectoryA
StrIsIntlEqualW
kernel32
CopyFileW
lstrlenW
GetCommandLineW
GetLastError
GetCommConfig
GetWindowsDirectoryA
GetModuleFileNameW
UnlockFile
SystemTimeToFileTime
GetShortPathNameA
LoadLibraryW
GetUserDefaultUILanguage
WinExec
gdi32
GetDeviceCaps
GetTextMetricsA
SetLayout
GetSystemPaletteEntries
CreateEllipticRgnIndirect
EndPage
DeleteDC
SetPaletteEntries
SetWindowOrgEx
GetObjectA
ntdll
_aullrem
user32
EnumWindows
SetPropW
DefWindowProcA
DrawFocusRect
CreateMenu
OemToCharBuffA
GetForegroundWindow
SendMessageA
MessageBoxExW
SetMenuItemBitmaps
SetLastErrorEx
CharLowerA
GetFocus
Exports
Exports
?xqGIGtHseGjmhbaGhfpc@@YGPAKG@Z
?cwBCpmjoaCr@@YGGE@Z
?pZifJBnex@@YGXPAGPAI@Z
Sections
.itext Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 84KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ