O:\byrsBNff\fsjX\lhcj\znuOd.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b8754bdb31e8338a883db2a4bd0d8312_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b8754bdb31e8338a883db2a4bd0d8312_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b8754bdb31e8338a883db2a4bd0d8312_JaffaCakes118
-
Size
185KB
-
MD5
b8754bdb31e8338a883db2a4bd0d8312
-
SHA1
cb285dd89dfee3bb9a29afde13222ec4888122c0
-
SHA256
d535b62b6f3f5e54e8789be31200da0bf36029da696b789b4d3a9faead5e5e4d
-
SHA512
a4ee2fbf288b1614ad256ad98c4d29d89d35e95a9cb2177fa284351328c20bace8ca50a7b90f570102c3eb710165e0282df050494775466846cb2f3ed2c87d2a
-
SSDEEP
3072:v70ZVnzylzZ7KRkuYa3g9cfoxFF/iIM3uAN/TqFY5833OI0XN9g5nRx:v7kxczZGRkNUfW/iImFNLVCONd9gpRx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8754bdb31e8338a883db2a4bd0d8312_JaffaCakes118
Files
-
b8754bdb31e8338a883db2a4bd0d8312_JaffaCakes118.exe windows:5 windows x86 arch:x86
5d01e0b5462ab4fff435799670af27b5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
LoadLibraryW
SetLocalTime
SetSystemTime
GetACP
GetCompressedFileSizeW
DeleteAtom
GetProcAddress
GetStartupInfoA
LocalUnlock
HeapFree
GlobalCompact
GlobalMemoryStatus
lstrcmpiW
comdlg32
FindTextW
GetFileTitleW
user32
GetScrollPos
CharUpperBuffW
SetFocus
SetMenuItemInfoW
GetWindow
GetMenuItemID
SendMessageTimeoutW
DrawAnimatedRects
GetWindowLongA
TranslateAcceleratorW
EqualRect
SetWindowPlacement
GetKeyboardLayout
gdi32
CreateRoundRectRgn
GetTextCharsetInfo
ExcludeClipRect
SetDIBitsToDevice
SetViewportExtEx
Polyline
SetROP2
GetPaletteEntries
Exports
Exports
?MtYsifozrhDnvgqjwVimc@@YGHH@Z
?gyHosqw@@YGM_ND@Z
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 1024B - Virtual size: 639B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 142KB - Virtual size: 210KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ