Q:\jyQxewvr\zVxa\pcxGkp\fcfgw\juGb.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c76369a7e43b2a40f0ab64ab83deaed1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c76369a7e43b2a40f0ab64ab83deaed1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c76369a7e43b2a40f0ab64ab83deaed1_JaffaCakes118
-
Size
178KB
-
MD5
c76369a7e43b2a40f0ab64ab83deaed1
-
SHA1
200b735b77f162022c39ec1368ec04ce75148869
-
SHA256
e1e33c0009e1ba5796011ff7d7cac9e20d4fd01b50bfbf7852bab2f9d011c1bf
-
SHA512
ccb4cdfbbd3448f067c622bf1237e070c21f5287c8d62bd289b59881672d61fa0dbb038ac4c2ffd1cbfbe1e72525ad2002ddfd3a43bf4978cfeb83e6657ec583
-
SSDEEP
3072:c5s9fSXIEDMI5VWqVQhIjyqU4YvUvhsQTfXvA5HZpRoTpQWe9Q5RnGWW7lwPjjWL:c5sJSJrZQho249JlTfqR4qry5RnGWeeR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c76369a7e43b2a40f0ab64ab83deaed1_JaffaCakes118
Files
-
c76369a7e43b2a40f0ab64ab83deaed1_JaffaCakes118.exe windows:5 windows x86 arch:x86
9d94175e436e6b037b21f3a283af8b3d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
SaveDC
CreateHatchBrush
RemoveFontResourceW
SetTextColor
FillRgn
RectVisible
GetTextAlign
user32
HideCaret
AdjustWindowRect
GetScrollPos
IsCharUpperA
CharToOemA
GetWindowLongA
CreateCursor
DestroyCaret
GetWindow
SetPropW
RegisterWindowMessageA
CharToOemBuffA
comdlg32
ReplaceTextW
GetSaveFileNameA
kernel32
lstrcpynA
GlobalMemoryStatus
LoadLibraryW
GetStdHandle
SetCommTimeouts
CancelIo
LocalFree
LocalReAlloc
GetProcAddress
SetLocalTime
lstrcmpiW
GetSystemTimeAdjustment
GetThreadLocale
comctl32
ImageList_GetIcon
ImageList_GetImageCount
Exports
Exports
?vzQjptohvvehtJbgfL@@YGIGI@Z
?Qpvcexk@@YGHJ@Z
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 1024B - Virtual size: 635B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 141KB - Virtual size: 213KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ