I:\qhwNxM\BmbiUapi\vqjqf.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b8caf28ea771dddc93822b4772ad4f84_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b8caf28ea771dddc93822b4772ad4f84_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b8caf28ea771dddc93822b4772ad4f84_JaffaCakes118
-
Size
113KB
-
MD5
b8caf28ea771dddc93822b4772ad4f84
-
SHA1
f2e0cb070894724dc6edeb26560635f07d713fdb
-
SHA256
8bbfaa2cbdda5a34560ff2dec691ddb06f0ce8fcefcec134a91ad0ff38d0169b
-
SHA512
cc38f4313451ed15d0bfba5a7ab6fa49eba085718173d9744712c2c11be6d30362479fc299277d4db2851183fd79625b08507f4b0ca89e0b2577fc9b0052224a
-
SSDEEP
3072:Nhg7bmN4CD1muAT+YFhWkGAr3v+dOZyLaqg:NKyD1muAyeWk/32cWq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8caf28ea771dddc93822b4772ad4f84_JaffaCakes118
Files
-
b8caf28ea771dddc93822b4772ad4f84_JaffaCakes118.exe windows:5 windows x86 arch:x86
95de2dd3d7a93083ee522e8fec01b613
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comdlg32
ReplaceTextW
GetOpenFileNameW
GetFileTitleW
kernel32
CopyFileW
LoadLibraryW
EnterCriticalSection
lstrcmpiW
UnmapViewOfFile
GetBinaryTypeW
lstrlenW
GetThreadTimes
SetThreadLocale
SetWaitableTimer
GetProcAddress
user32
ShowScrollBar
IsWindowVisible
DeleteMenu
WindowFromPoint
GetClassInfoA
ClientToScreen
GetMenuItemRect
IsCharUpperA
GetMenuStringW
GetWindowLongW
DispatchMessageW
CreateDialogIndirectParamW
GetPropW
shlwapi
StrCmpNW
gdi32
SetTextAlign
ExtFloodFill
DeleteDC
TextOutW
CreateDCW
SetViewportOrgEx
GetTextExtentExPointW
Exports
Exports
?qOgbcKYpq@@YGDM@Z
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 86B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ