F:\uloReOkc\fgBJvpc\XMpFZIe.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d255eb247c2a26d261a8c3bcf488638f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d255eb247c2a26d261a8c3bcf488638f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d255eb247c2a26d261a8c3bcf488638f_JaffaCakes118
-
Size
148KB
-
MD5
d255eb247c2a26d261a8c3bcf488638f
-
SHA1
c6ecc4adfb443cf088fbe22b4cc1a3c78e4dc05c
-
SHA256
67610b7c9961d7b59ede2c1f10ae4ee5a4d992203a222a354905338a4f5f3e61
-
SHA512
8bf98360394168e4649897852c3f43587579d281a4737684db0462bfdca38281837828f4ee996514c1d1051c8673e35f986148fde742f20693b9300d255089b7
-
SSDEEP
3072:uQEqx+1WygRQOrJ5lOuij8x55INNTaeKiuweuUIOci22Go6:2qhykimoJ1K7eU0il6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d255eb247c2a26d261a8c3bcf488638f_JaffaCakes118
Files
-
d255eb247c2a26d261a8c3bcf488638f_JaffaCakes118.exe windows:5 windows x86 arch:x86
eeefc9e510536a573a01c300bfe0951d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
SetWindowExtEx
RestoreDC
GetSystemPaletteEntries
BitBlt
ScaleWindowExtEx
CreateHalftonePalette
Escape
CombineRgn
PtVisible
StartPage
CreateRectRgn
CreateHatchBrush
EnumFontsW
kernel32
EnumSystemLocalesA
FindFirstChangeNotificationW
lstrcpyA
CreatePipe
CopyFileA
GetStartupInfoA
GetSystemDefaultUILanguage
GetSystemDirectoryW
SizeofResource
RemoveDirectoryA
SetThreadAffinityMask
TransactNamedPipe
HeapCreate
user32
SetRect
WindowFromPoint
SetScrollRange
SetMenu
GetAsyncKeyState
PostThreadMessageA
DrawTextExW
CopyRect
CreateCaret
GetWindowLongW
GetKeyboardLayout
TileWindows
InSendMessage
LoadImageA
RegisterClassA
GetClassLongW
DrawStateW
CheckMenuRadioItem
LookupIconIdFromDirectory
ShowCaret
DefFrameProcW
WaitMessage
DefDlgProcA
GetShellWindow
IsZoomed
TranslateAcceleratorA
CharNextW
SetRectEmpty
Exports
Exports
?KPOLCJNc_izJOCAvzmn_cu@@YGPAGGJ@Z
?yi_ub_k_uv_XCgcrrpazU@@YGEPAH@Z
?CNzbVDTN@@YGXPA_NG@Z
?_s_rh__A_J__y@@YGPAMG@Z
Sections
.text Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mdata Size: 11KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ