J:\JeEF\aUCJzu\Jvzd\oiwvNz\xdsRbA.pdb
Static task
static1
Behavioral task
behavioral1
Sample
cecadee25e4fee59b208632cd9c67239_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
cecadee25e4fee59b208632cd9c67239_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cecadee25e4fee59b208632cd9c67239_JaffaCakes118
-
Size
194KB
-
MD5
cecadee25e4fee59b208632cd9c67239
-
SHA1
befc7e03e06a2404963696e879343563b470862c
-
SHA256
7085b9d649dbf9418a24ec2580920a7691b49490ed7c04b75c720f82f15b031e
-
SHA512
1e70aa5e1543911d7849717b9025cab7cc07161ab492f813de2fb0ab60130db30172ebf935637198b0ef2c6c61f6ec1451aa97c6e35c5467f6fdc25e6c8484e7
-
SSDEEP
6144:q0oMLmAJm/d2+Cm30CS+vOvqQArJLthQq0z:NmAJsrrGvMpb6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cecadee25e4fee59b208632cd9c67239_JaffaCakes118
Files
-
cecadee25e4fee59b208632cd9c67239_JaffaCakes118.exe windows:5 windows x86 arch:x86
28924e16a972cd2fb761ff2260b4892c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ntdll
_vsnprintf
shlwapi
PathRemoveArgsW
ChrCmpIW
user32
BringWindowToTop
MapVirtualKeyExA
CreateAcceleratorTableW
GetAsyncKeyState
GetCaretBlinkTime
GetKeyState
ExitWindowsEx
GetCursorPos
GetFocus
VkKeyScanW
IsIconic
DrawMenuBar
GetMessagePos
OemToCharA
GetForegroundWindow
comctl32
ImageList_Draw
ImageList_Destroy
gdi32
RectVisible
GetTextExtentPoint32W
GetCurrentObject
CreatePalette
CreatePen
RemoveFontResourceW
kernel32
CreateWaitableTimerA
IsValidLocale
GlobalDeleteAtom
InitializeCriticalSection
OpenMutexA
ConvertDefaultLocale
OutputDebugStringA
MoveFileExW
SetCommMask
EnumResourceNamesA
ConnectNamedPipe
GetFileAttributesExW
Exports
Exports
?ugtmCqeQWyqbixJDyjjtUH@@YGKM@Z
?plfbZplQtwoYchzdoO@@YGPA_NPAD@Z
Sections
.itext Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 87KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ