C:\fJeUwU\QxZNpF\IxIz\MGcbcfCs\ydllbIn.pdb
Static task
static1
Behavioral task
behavioral1
Sample
becc448743efabce9f1d6e6fe4b5c038_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
becc448743efabce9f1d6e6fe4b5c038_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
becc448743efabce9f1d6e6fe4b5c038_JaffaCakes118
-
Size
176KB
-
MD5
becc448743efabce9f1d6e6fe4b5c038
-
SHA1
2cbe9e8454a2a6e255a79422dfec434363f86f7d
-
SHA256
93a4cd9f57c788314c8acfa65a79b6a9c69bc868b466aaf701c99ce8de4149eb
-
SHA512
e087c08accbbba0788a3af7721340fc04caeff88bf0f34f128cc07bc25c2fb12d296e7bb043c8fd6f666e5197798275fe79458a0adb5a696314f6d7e25cf2f65
-
SSDEEP
3072:omdJLLiaXzwvZHXbjetTcpn8VPAsCs+/bnwVCxxk9C5ga4VxVLiVEInKsXJA:9bLiaXkF6jAfl/bnwVCAo5gPz+KInl6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource becc448743efabce9f1d6e6fe4b5c038_JaffaCakes118
Files
-
becc448743efabce9f1d6e6fe4b5c038_JaffaCakes118.exe windows:5 windows x86 arch:x86
8aca9c1e8663015d7c8de02c004e9156
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
VerSetConditionMask
SetFilePointer
OpenSemaphoreW
GetLocaleInfoA
CallNamedPipeW
GetStartupInfoW
GetCommTimeouts
SetThreadExecutionState
WriteFile
lstrlenW
FlushFileBuffers
LocalLock
CopyFileW
GetOEMCP
comctl32
CreateToolbarEx
PropertySheetA
DestroyPropertySheetPage
ImageList_Remove
user32
RegisterHotKey
SetWindowPlacement
CharNextExA
InflateRect
GetMenuDefaultItem
RemovePropW
MessageBoxExW
GetMenu
DefWindowProcA
SetCursorPos
IsWindowVisible
GetWindowTextLengthA
GetScrollPos
wsprintfW
gdi32
AddFontResourceW
SetViewportOrgEx
SaveDC
CreateFontIndirectW
GetDIBits
RectVisible
CreateDCW
Polygon
Rectangle
shlwapi
StrCatBuffW
Exports
Exports
?matbxUuhiqmsb@@YGNI@Z
?hvlBorxt@@YGMIE@Z
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 305KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 133KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ