I:\ljboKyd\PVfxlfjHNlG\ztPgqAYDupDpsd\qPbwhvXtjwwtEj\scesisdbrzjN.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d6bc78b81284dbc5fb286c4cbf2a2306_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d6bc78b81284dbc5fb286c4cbf2a2306_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d6bc78b81284dbc5fb286c4cbf2a2306_JaffaCakes118
-
Size
72KB
-
MD5
d6bc78b81284dbc5fb286c4cbf2a2306
-
SHA1
f7f9b1da9555776cdd006606c3fa799fec4cc94f
-
SHA256
5a31c5387dcb7a1cb558c74ea189fd6c6378a992130ec7d573d7e764e80ad0de
-
SHA512
e0d63c828856a0c6e53785b3c9a3d9c76460e11f42beb6808ee368ec8a28f7dd5da9ddc6a2b5b5e71bca2f52662e8d1ef2092df9a5425c43935d3976e2df5219
-
SSDEEP
1536:eh95v4mtsC2/yQSqILhtzaFTgG+aClBRHK2QPY2B:er5ptsC2qQSz99U7+5/uPPB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6bc78b81284dbc5fb286c4cbf2a2306_JaffaCakes118
Files
-
d6bc78b81284dbc5fb286c4cbf2a2306_JaffaCakes118.exe windows:5 windows x86 arch:x86
3f670605575da6cc5ecbf8968513577d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
atoi
memset
_controlfp
__set_app_type
__p__fmode
__p__commode
_amsg_exit
_initterm
_ismbblead
_XcptFilter
_exit
_cexit
iswprint
__setusermatherr
__getmainargs
shlwapi
UrlIsOpaqueW
UrlGetLocationA
user32
OpenDesktopW
HideCaret
SetParent
CopyAcceleratorTableW
IsCharAlphaA
SetMenu
DialogBoxParamA
TrackPopupMenu
GetMenuStringW
DeleteMenu
GetDC
DrawIconEx
EnumChildWindows
LoadAcceleratorsA
wsprintfW
GetDlgItemTextA
LoadIconW
kernel32
SetThreadPriority
LoadResource
FindResourceA
FileTimeToLocalFileTime
IsDBCSLeadByteEx
CreateThread
lstrlenA
GetModuleHandleA
HeapAlloc
lstrcmpiW
GetModuleFileNameA
EnumResourceTypesA
Exports
Exports
?InitConfigDir@@YGHHPAUHINSTANCE__@@|U
Sections
.text Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.$dsdir Size: 512B - Virtual size: 122B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.icar Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.ecar Size: 512B - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ally Size: 512B - Virtual size: 472B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.carry Size: 1024B - Virtual size: 572B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ram Size: - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ