O:\FdgD\eqOr\knyiK\WUMetxE.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d4b6d3e595a1e6d68c686d44e3f8f915_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d4b6d3e595a1e6d68c686d44e3f8f915_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d4b6d3e595a1e6d68c686d44e3f8f915_JaffaCakes118
-
Size
219KB
-
MD5
d4b6d3e595a1e6d68c686d44e3f8f915
-
SHA1
256376ae405896bab7530fd0ae888308e2b2c45b
-
SHA256
020cbdcb5f10a955c3d5805d64d598106b1cdaefe2ad6d85fb682210e2b9aca7
-
SHA512
0318dea191307d2e2c6995597a725e3e84b307da71c804b70e8a65851358d676f76e3c25752a211fd9f0fc74fa4679a4321a2988b065fbdba82b0392f3ba801d
-
SSDEEP
6144:aLjBh4gd4OFnVkBYAjy0pQiXHqUQt92Jw3Nk:awFGnVky6jpQqqN8Jwdk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4b6d3e595a1e6d68c686d44e3f8f915_JaffaCakes118
Files
-
d4b6d3e595a1e6d68c686d44e3f8f915_JaffaCakes118.exe windows:5 windows x86 arch:x86
28cc3acea3102e8c5f1017b349b4b03f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
PathFindExtensionA
user32
DrawCaption
ToUnicodeEx
SendDlgItemMessageA
IsDialogMessageW
GetActiveWindow
SendMessageW
OffsetRect
LoadCursorW
CheckDlgButton
IsCharLowerW
DrawMenuBar
FindWindowW
kernel32
SetThreadLocale
GetCurrentProcess
WaitForSingleObject
OpenFileMappingW
SetSystemTimeAdjustment
CreateEventW
lstrcatA
GlobalCompact
GetCurrentProcessId
gdi32
SetPaletteEntries
GetTextFaceW
GetFontData
LineTo
CreateFontA
GetNearestPaletteIndex
Exports
Exports
?ueRAGSINBFOx_l_@@YGPAMDPA_N@Z
?XYGVCO_G_Epgl@@YGNE@Z
?e_gZMTWRdjej_v@@YGXM@Z
?_tra_ja_AWZIaqmci@@YGHPAJG@Z
?neL___Jj_@@YGKJ@Z
Sections
.text Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 682B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA1 Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA2 Size: 76KB - Virtual size: 239KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ