U:\baWagJZiGjnt\xinTTzwzeHjrhf\dwseljzoh\oeswbibf.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d2c3c5c77316bbaf25da8e44a88cfda3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d2c3c5c77316bbaf25da8e44a88cfda3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d2c3c5c77316bbaf25da8e44a88cfda3_JaffaCakes118
-
Size
192KB
-
MD5
d2c3c5c77316bbaf25da8e44a88cfda3
-
SHA1
867529143faee47a42fb4a74c984c5aae1ec1303
-
SHA256
74957be9f31a127d445f322e87b413c3bab2a7c833f7608dd05a1e6a11e25383
-
SHA512
8fb2f76d67d6b793a43629831f870ede9f093885482ea816a6b76491d8f880c6c515df1f1ecbf806b9f5ce941a20ef59ad37712881f88401bca47bf233bd9bd0
-
SSDEEP
3072:K+VfAGLEZwJkzB8zTLa6fz9FnJ4RUtiEa/evuEWRaXL3GfX65kIlc4CTc1TZ1u:XfAkEZbB8zTL5DnJ4RUuMjGfquLc1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2c3c5c77316bbaf25da8e44a88cfda3_JaffaCakes118
Files
-
d2c3c5c77316bbaf25da8e44a88cfda3_JaffaCakes118.exe windows:5 windows x86 arch:x86
94a9a5289654f0d5c0b21d86de1f2328
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetCommState
CreateFileMappingA
HeapSize
SetEndOfFile
DeleteFileA
VirtualProtect
SearchPathW
shlwapi
PathUnquoteSpacesW
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
user32
CheckRadioButton
MessageBoxW
ntdll
RtlCaptureContext
Exports
Exports
?InsertCustomData@@YGKXZ
Sections
.text Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ