Q:\BekVE\Edjtr\simS\tApXsbIA.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d14b2b9226c4d7f0587002ae359ad863_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d14b2b9226c4d7f0587002ae359ad863_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d14b2b9226c4d7f0587002ae359ad863_JaffaCakes118
-
Size
48KB
-
MD5
d14b2b9226c4d7f0587002ae359ad863
-
SHA1
cef333b931077d071ee8b5c7676a68290ee441ce
-
SHA256
706d5da5707c35a1024017c0f991b97e354342ef6249603368ec5f75b09dc2a2
-
SHA512
0b386b0d8a2f5eeb35f31d6dae1226992efbdd9040827572a0515eb21f4fff1d9103164f08d079983873390464b479732d736759745e03a93b62bc7bda25888c
-
SSDEEP
768:K7+2D5rFLyBJH4RQHVfFGrDnPh0lFp79yYUL7zbfbToCEKOv2iOv6R:K7+29FyXH4REFGvOlZ8rToCEK3+R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d14b2b9226c4d7f0587002ae359ad863_JaffaCakes118
Files
-
d14b2b9226c4d7f0587002ae359ad863_JaffaCakes118.exe windows:5 windows x86 arch:x86
71b4d850e8b8cdd8d656a1aa17fe9c1d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
CascadeWindows
ClientToScreen
CreateDialogParamA
FillRect
GetKeyNameTextW
wsprintfA
ExitWindowsEx
WaitForInputIdle
SetWindowTextA
GetMessageW
OpenInputDesktop
PostMessageW
kernel32
LockResource
AddAtomA
GetModuleFileNameA
GetCommandLineA
SetPriorityClass
FindNextFileA
HeapReAlloc
DeviceIoControl
lstrcpynA
VerSetConditionMask
GetDateFormatW
WaitCommEvent
lstrlenA
gdi32
EndDoc
SelectPalette
Polyline
CreateRoundRectRgn
GetNearestColor
LineTo
SelectClipRgn
comdlg32
ChooseColorW
GetFileTitleW
Exports
Exports
?agkjycthWojgB@@YGGG@Z
?uygpfxqxwzdIgjVuMbgwj@@YGPAKDPAI@Z
?kwTSAbebudvimm@@YGFK@Z
?hgQtXsVrhlw@@YGNJ@Z
?cpsZadhpw@@YGXDPAM@Z
?kngsttovfPfKJQvzA@@YGJJK@Z
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 512B
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 210KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ