V:\yxgfnlW\kKywyzC\RJfPjfmP.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d28a1332c607f118a97c336118e62ae1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d28a1332c607f118a97c336118e62ae1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d28a1332c607f118a97c336118e62ae1_JaffaCakes118
-
Size
125KB
-
MD5
d28a1332c607f118a97c336118e62ae1
-
SHA1
5533ab157da69a8d21fc3400ab6f5afe718309e4
-
SHA256
5ecdb129e864726e6d1f1e39ece0b8ebb9c86f13021657a0eebb011a27d744f7
-
SHA512
2b0ec9f7a32d13434b9baa1f5438bef94048b4a0656aefc0edef11fd6e4de9b89ca6dce2e987de7a1b7762d84e3ccb30bb1f8805bc065337410b3e58a4f8d9db
-
SSDEEP
3072:sqysBQmvgYwaJnZ+/fU7Np+I6z0DEpOm9KydgN2u2G:4idSoZ37NEIx0Pu2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d28a1332c607f118a97c336118e62ae1_JaffaCakes118
Files
-
d28a1332c607f118a97c336118e62ae1_JaffaCakes118.exe windows:5 windows x86 arch:x86
102c97268cf9dc559fa35fb0824220ab
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
DeleteDC
GetObjectW
UnrealizeObject
Polyline
GetDeviceCaps
SetViewportExtEx
CreateRectRgnIndirect
SetDIBits
kernel32
WaitCommEvent
GetThreadContext
OpenEventA
GetCurrentThread
lstrcmpiA
GetHandleInformation
GetLongPathNameW
OpenEventW
LoadLibraryA
PulseEvent
GetTickCount
GetBinaryTypeA
user32
TrackPopupMenu
PeekMessageA
IsZoomed
MapDialogRect
wsprintfW
EnumChildWindows
MessageBoxW
ExitWindowsEx
GetWindowPlacement
SetWindowTextW
PostThreadMessageW
SetWindowTextA
Exports
Exports
?YkpzgPkMpqtlllUjWojLO@@YGDDG@Z
?ypxvvUyA@@YGPAGHJ@Z
?DvtSbArnvdfpbEef@@YGPAFPAFPAG@Z
?xaintjeNeMIStnq@@YGPAKIN@Z
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ