V:\inzgmwqcsREBm\nxbCiaoqCw\hMwVynPIwwu.pdb
Static task
static1
Behavioral task
behavioral1
Sample
bfb504e6575cf353dd19556c914648e2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bfb504e6575cf353dd19556c914648e2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bfb504e6575cf353dd19556c914648e2_JaffaCakes118
-
Size
171KB
-
MD5
bfb504e6575cf353dd19556c914648e2
-
SHA1
98481793bdf726afa26d708f5d9fe3b2be8739ec
-
SHA256
d8fa7739e54c5e13293411be2d4052674d6409c50ec0deb4ad66e636d341417b
-
SHA512
198680124f6ba7a6aa28ed47e7360f7edc372f78e5bef7dedffbadf34292cb0c3e6bfcc51406da312c8190e8cefb3e3b89b721182bb95a98eed8ac6b09d5f6bc
-
SSDEEP
3072:p/SFx12jlRbktNlyk2bpVX6b0ChBwTHlvsnOm2MY3kAzEnmYI8k5LnjgigmU9da:Ox12jllktNx2LhKwrlvYOBMY3kAg6D9x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfb504e6575cf353dd19556c914648e2_JaffaCakes118
Files
-
bfb504e6575cf353dd19556c914648e2_JaffaCakes118.exe windows:5 windows x86 arch:x86
d5b486580c400d91201d8ac297b83653
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetShortPathNameW
GetLastError
HeapSize
CreateWaitableTimerW
GetSystemDefaultLangID
GetStartupInfoA
CreateMailslotW
shlwapi
PathMakeSystemFolderW
advapi32
RegQueryValueW
RegQueryMultipleValuesA
RegQueryMultipleValuesW
user32
GetTopWindow
GetActiveWindow
GetWindowRect
MessageBoxIndirectA
MessageBoxIndirectW
MessageBeep
KillTimer
ntdll
RtlCompareMemory
Exports
Exports
?ValidateDataInFile@@YGKXZ
Sections
.text Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pack1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ