V:\duukEjqePX\tebjnMurqSN\hdpqDVVttABxsx\tkHZOlVN.pdb
Static task
static1
Behavioral task
behavioral1
Sample
bdd508739577b0b1a71cc2fb391e00a2_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bdd508739577b0b1a71cc2fb391e00a2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bdd508739577b0b1a71cc2fb391e00a2_JaffaCakes118
-
Size
187KB
-
MD5
bdd508739577b0b1a71cc2fb391e00a2
-
SHA1
2258bb8fd49c99cd8adab4b5cbfeadee5581284a
-
SHA256
a55912b9096f5384de0dec02fcadd7629ccaa87fe1ab8415b92c92799e7e61da
-
SHA512
881d414835aacaa07849bfe332f0b30570a1f601ea94491f3b15f9a2c4594923aa640a108eabaf40d829db10b5de2313c8a6815a26a6ca4dcf912720ede5f5ad
-
SSDEEP
3072:5v5vSWPt4BY2n1wRrenEgVFpLBMA3GzzUAbi3uGmftVzl2qK/:9szKChEgBLBMA3GnUA2+1zl2j/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdd508739577b0b1a71cc2fb391e00a2_JaffaCakes118
Files
-
bdd508739577b0b1a71cc2fb391e00a2_JaffaCakes118.exe windows:5 windows x86 arch:x86
65f1779b686361b65fa2914474ac66e0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
SetCurrentDirectoryA
EnumResourceTypesA
GetFileInformationByHandle
FlushFileBuffers
WaitForSingleObjectEx
EnumSystemLocalesA
HeapAlloc
shlwapi
PathUnquoteSpacesW
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
user32
GetForegroundWindow
MessageBoxW
KillTimer
CheckRadioButton
ntdll
RtlCaptureContext
Exports
Exports
?InsertCustomData@@YGKXZ
Sections
.text Size: 155KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code Size: - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
eoenpbq Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE