U:\ocQNR\ikoiJ\JraexH.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c0d7dccd120f9efff21eed15664bd695_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c0d7dccd120f9efff21eed15664bd695_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c0d7dccd120f9efff21eed15664bd695_JaffaCakes118
-
Size
170KB
-
MD5
c0d7dccd120f9efff21eed15664bd695
-
SHA1
ef468e20d26e857d4a689b2a88adfdf55915448e
-
SHA256
efca546c5dc117eca7e9d9b324bba7f5f7732a76bb1811fc580cda4d9535b316
-
SHA512
8accbe9ba5bf319182067ee6e5ec06fea428d2facf8a8f82c4b8654d8d6be4413ecc768546190702708c1ef70a1186d9c9ff5287a4891054b486d528b94f9d5c
-
SSDEEP
3072:8+W3CW+OwPuetQZ65mYtQwkk1dbwfo98u+asc4oXpKkYAl94a4mSMTy1X:2Skw2Qbjqw31d6cZHZXIAlL+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0d7dccd120f9efff21eed15664bd695_JaffaCakes118
Files
-
c0d7dccd120f9efff21eed15664bd695_JaffaCakes118.exe windows:5 windows x86 arch:x86
596730175d621c3723d4aa3cefb8072e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comdlg32
CommDlgExtendedError
GetOpenFileNameA
ntdll
_aullrem
gdi32
WidenPath
FillRgn
CreateRectRgn
GetTextExtentPoint32A
EndPage
GetRgnBox
user32
EnumWindows
LoadIconA
CharToOemBuffA
WindowFromDC
CharNextExA
EndPaint
CopyRect
OffsetRect
ActivateKeyboardLayout
GetClassInfoExA
GetDialogBaseUnits
AttachThreadInput
kernel32
lstrcmpW
GetModuleHandleW
ClearCommError
CreateWaitableTimerA
SetMailslotInfo
GlobalLock
GetFileAttributesExA
lstrlenW
GetOverlappedResult
ConnectNamedPipe
DeleteFileW
HeapUnlock
GetCommConfig
GetProcAddress
Exports
Exports
?kdqcxWih@@YGPAXG@Z
?JNPzCtwzMcjst@@YGXD@Z
?fuUlkVjgiyPNdwnaPQgvA@@YGMDD@Z
?emtuURMRPwELOybFWIPL@@YGJPAKG@Z
?nWFowkvkueadwbGtxoBh@@YGEPAJPAF@Z
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 139KB - Virtual size: 215KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ