O:\tjwqrmgD\dptgBwhv\ToctUgdZ.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c1b7b3b9dbabdca52b8d612c42593ada_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c1b7b3b9dbabdca52b8d612c42593ada_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c1b7b3b9dbabdca52b8d612c42593ada_JaffaCakes118
-
Size
175KB
-
MD5
c1b7b3b9dbabdca52b8d612c42593ada
-
SHA1
039563a5f56030cbb8a50dbcb23e675c6582b433
-
SHA256
bff4fc63ce754e7d3d109ff03be829f89a54a792338330e34845673e89030887
-
SHA512
d2c459d06d3749abe8ad4ad173d6da7562396a94d0d009af7a9f00f79278aba8288235da8d3244a76882659469fa3f7999fd529319b8e863319d530212f18b55
-
SSDEEP
3072:cvaHLlj+Mazy3VYSW60uRvJWOAQXYqyRWKipmA3ww/o0:cu+ZyFYSnHvJArWKUL3ww/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1b7b3b9dbabdca52b8d612c42593ada_JaffaCakes118
Files
-
c1b7b3b9dbabdca52b8d612c42593ada_JaffaCakes118.exe windows:5 windows x86 arch:x86
934f0875c2e2dbd053341e5e932ea661
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
VirtualAlloc
VerSetConditionMask
GlobalFindAtomW
LoadLibraryW
GetProcAddress
SetFileAttributesW
lstrlenW
lstrcmpiW
HeapLock
GlobalUnlock
SetErrorMode
IsDBCSLeadByteEx
comctl32
ImageList_LoadImageW
PropertySheetW
CreateToolbarEx
CreatePropertySheetPageW
comdlg32
ChooseColorW
ReplaceTextW
user32
ValidateRect
GetWindowLongW
IsChild
SendMessageTimeoutA
GetPropW
DestroyCursor
ShowScrollBar
GetMenuItemID
GetDlgItemTextW
GetSysColorBrush
CreateAcceleratorTableW
DrawFrameControl
gdi32
SelectClipRgn
ExtFloodFill
GetBkMode
CreateRectRgn
StretchBlt
GetTextExtentPoint32W
Exports
Exports
?zanonmphkoxGr@@YGFD@Z
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.temp Size: 139KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 90B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ