Q:\iDeg\pKkVylg\ikqqCcN.pdb
Static task
static1
Behavioral task
behavioral1
Sample
baf45f37f509681c494a08e0a88024e2_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
baf45f37f509681c494a08e0a88024e2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
baf45f37f509681c494a08e0a88024e2_JaffaCakes118
-
Size
81KB
-
MD5
baf45f37f509681c494a08e0a88024e2
-
SHA1
9a67b66060633f4ddc8c42b1232fc3206884eb0c
-
SHA256
c8a8e1fb4712e7d62e37ba5b8c60ba95a275f34fe657233c1123129bee4be5f3
-
SHA512
90cfc854cf384f44306fde0fc4b12fb3121dd8409b190f960814c0be2a5c422c3cc14995eafa2fab3607e710125e1246959110e21877b5afc1074c847a4a2723
-
SSDEEP
1536:OD+I4nOZaYx6mmgTcz7sBzAh8pfaTFIbew7cP6tR9aZlbn2hfAaO:ODcnPYx6BgTwsuhAfaCbew7ciLil8f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource baf45f37f509681c494a08e0a88024e2_JaffaCakes118
Files
-
baf45f37f509681c494a08e0a88024e2_JaffaCakes118.exe windows:5 windows x86 arch:x86
f9381ddac2754524ca6963b32baea794
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
ExcludeClipRect
GetTextExtentPoint32A
DeleteObject
SetDIBits
CreateDiscardableBitmap
SetBitmapDimensionEx
Ellipse
GetObjectW
comctl32
ImageList_GetIconSize
CreateToolbarEx
DestroyPropertySheetPage
user32
RegisterClassA
GetWindowContextHelpId
ValidateRect
LockWindowUpdate
DrawAnimatedRects
CopyRect
WindowFromPoint
CallWindowProcW
CreateDialogParamW
GetClassInfoExW
wsprintfW
InternalGetWindowText
SetMenuItemInfoW
IsZoomed
kernel32
GetFullPathNameA
IsValidLanguageGroup
GetVersion
InterlockedIncrement
DisconnectNamedPipe
DeleteCriticalSection
GetDateFormatA
GetCurrentThread
LockResource
OpenEventW
SetThreadPriority
WaitForSingleObject
IsBadCodePtr
LeaveCriticalSection
Exports
Exports
?SEdjvbruQPLtpxnmf@@YGXPAMPA_N@Z
?RDzdAvNdpxe@@YGEM@Z
?udyNKlwGjonegV@@YGHPAN@Z
?yOmdrlcBsktavNyhozc@@YGKHF@Z
?rkiofqHCdxBnKtj@@YGXPAID@Z
?SszlVsrYCyAxYamf@@YGPAXF@Z
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 512B - Virtual size: 172B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ