E:\jyonCnNpxZlJwh\XatGWiula\ykpwhKiLfNdzPd\adufkrM\dbephmbdM.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b3a9a15521fe99c943051f71e368b810_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b3a9a15521fe99c943051f71e368b810_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b3a9a15521fe99c943051f71e368b810_JaffaCakes118
-
Size
167KB
-
MD5
b3a9a15521fe99c943051f71e368b810
-
SHA1
60cac6572ef4a1def2e30a8a72cfdc5b318da138
-
SHA256
c1bdb4c474666e7806d251eb882ea8728021a7e27482bd38fcb9137be33fd092
-
SHA512
3bfbcc87864c1497d07d5186b2cacd3c28c683e56943df66fe6dc2b2272828cce0c5fc3f9ab4627097adfcbf2c95c23edeee2b726357c397597dc2aa94085cef
-
SSDEEP
3072:JvsG2ciAAAvjN2WSSDtdTqJUtPgs4l6223j4eXS0Vyqkdzuiz:JvjYA/jkWSBUJV20iSyqWx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3a9a15521fe99c943051f71e368b810_JaffaCakes118
Files
-
b3a9a15521fe99c943051f71e368b810_JaffaCakes118.exe windows:5 windows x86 arch:x86
81c31da05b5ebab36c41091841650912
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
SetThreadContext
GlobalMemoryStatus
GetProfileIntA
ResumeThread
GetProfileStringW
ClearCommBreak
GetSystemWindowsDirectoryW
GetShortPathNameW
ConnectNamedPipe
SetupComm
shlwapi
PathUnquoteSpacesA
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
user32
MessageBoxA
gdi32
AddFontResourceW
DeleteObject
FillRgn
CreateRectRgn
Exports
Exports
?ToTestFunction@@YGKXZ
Sections
.text Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.debug01 Size: - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ