E:\GdvPav\kzpS\curtmi\rskwa\CgzF.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d14b52cf06a991f5ff360e8e5e05d386_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d14b52cf06a991f5ff360e8e5e05d386_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d14b52cf06a991f5ff360e8e5e05d386_JaffaCakes118
-
Size
131KB
-
MD5
d14b52cf06a991f5ff360e8e5e05d386
-
SHA1
c195b5cb7339ae3e2831f477329151e6844dc97f
-
SHA256
c028783aa9fa1534a25986286ecf8eb32a43cc79e70f3ecc718066ce21fa349a
-
SHA512
8b3d1d3b9b7eb7b8e345ea56a2e29e5cf005959e2efa6be6b30846294f6a13e270012766a172225f8c6ce975352a0ecd9d3339f22908e70db8bdb37ed98531bf
-
SSDEEP
3072:GDa9Z/b6NGNggIMHw7tV58x7yF9FY5/W3:GkT6Nsg+Ot8x7yF9FY5/S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d14b52cf06a991f5ff360e8e5e05d386_JaffaCakes118
Files
-
d14b52cf06a991f5ff360e8e5e05d386_JaffaCakes118.exe windows:5 windows x86 arch:x86
b50b62e584f76f8599ae719a3cc94cf1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
CreateMailslotW
RegisterWaitForSingleObject
GetProcAddress
LoadLibraryW
lstrlenA
GlobalHandle
GlobalFree
lstrcmpiW
SetEndOfFile
CreateNamedPipeA
GlobalMemoryStatusEx
GetCommModemStatus
user32
IsWindowEnabled
CreateMenu
SetFocus
ShowScrollBar
HiliteMenuItem
CharPrevA
SetLastErrorEx
wvsprintfW
GetWindowLongW
EndDialog
GetMenuItemID
GetPropW
MapVirtualKeyA
shlwapi
StrCmpNA
gdi32
GetNearestColor
CreateEllipticRgnIndirect
BeginPath
GetObjectW
ScaleViewportExtEx
CreateFontW
CreateFontIndirectW
Exports
Exports
?nyzevsjn@@YGXMM@Z
?hpzeAysjeee@@YGJPAG@Z
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 119B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 269KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ