G:\zIcjlPhjxzaF\bdnqpMp\phUywTKEcuoHc\Okjstewe\vetNwQqlk.pdb
Static task
static1
Behavioral task
behavioral1
Sample
bfd68b2e649ab1865a35f1788b10b786_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bfd68b2e649ab1865a35f1788b10b786_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bfd68b2e649ab1865a35f1788b10b786_JaffaCakes118
-
Size
184KB
-
MD5
bfd68b2e649ab1865a35f1788b10b786
-
SHA1
61b6dd19a0d74c4a224febb397fdc20a53af6411
-
SHA256
608f76a6319da9cdbac536b3c275848c6808ad6146b8a5a56ea6782cbd2986d9
-
SHA512
b8468d336782344490608c4f096e11fd2eb141acad060571754285c83e20768ccf4316b83b34d5670578b6614daeeb5428bcf214e5e3fcbb344887b267613b27
-
SSDEEP
3072:/a2M8zzEyZv8hlxvh0RF7KNcRBiKzGBED4xgv9+sBoOOzR0zkBVhf1un7RFhLyC:ySftZUhlxqHRbiiD4xI+sjA2Eh6L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfd68b2e649ab1865a35f1788b10b786_JaffaCakes118
Files
-
bfd68b2e649ab1865a35f1788b10b786_JaffaCakes118.exe windows:5 windows x86 arch:x86
1f949c9f2e3b00bff2f53f7a4e7cc0b8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
PtInRegion
GetTextExtentPointA
RemoveFontResourceW
FillRgn
CreateCompatibleBitmap
kernel32
OpenFileMappingA
GetProfileIntW
GetCommandLineW
SetThreadPriority
ReleaseMutex
GetProfileSectionA
CreateEventW
LoadLibraryExW
shlwapi
PathUnquoteSpacesA
StrToInt64ExW
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
user32
MessageBoxA
Exports
Exports
?ToTestFunction@@YGKXZ
Sections
.text Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dbg01 Size: - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ