C:\PCrHq\ymLFtt\VnwXZvNz\mqvmcafd.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d70d03f0895d8d73baa64c5b0d4deb4b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d70d03f0895d8d73baa64c5b0d4deb4b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d70d03f0895d8d73baa64c5b0d4deb4b_JaffaCakes118
-
Size
96KB
-
MD5
d70d03f0895d8d73baa64c5b0d4deb4b
-
SHA1
e7f18708a4d6699e77b838741233d637b7be6472
-
SHA256
af3028f9a00715ee2e1ad7845f4de262936f32f9a43300ced271564aaf10aef4
-
SHA512
9dada2dfc77e0ab50eb356e80ef84a7c605d66073d9d6ea53ef5e8361bd1d348490012449ab9ff2d0d6daf64bf0850c17ba52fca4798811e621d5cf016f40c2f
-
SSDEEP
1536:igKrdaYbLsIDXT/tj1BxFI2SEbjMj55Wxng6LV0fiFitAGzcopiR:dKrrbLhDDrWEbaAfLV0fFt+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d70d03f0895d8d73baa64c5b0d4deb4b_JaffaCakes118
Files
-
d70d03f0895d8d73baa64c5b0d4deb4b_JaffaCakes118.exe windows:5 windows x86 arch:x86
f643df4c026037449bc9f529e168306a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
SendDlgItemMessageW
KillTimer
SwitchToThisWindow
FindWindowA
ShowScrollBar
GetActiveWindow
CharNextW
SetCaretPos
PeekMessageA
DefDlgProcA
IsCharAlphaNumericW
SetForegroundWindow
kernel32
GetDateFormatA
GetOverlappedResult
HeapUnlock
GetVersionExW
SetEvent
SearchPathA
SetSystemTimeAdjustment
GetCurrentThread
GetProcAddress
GlobalAddAtomW
ResumeThread
lstrcmpiW
GetModuleHandleW
gdi32
CreateHatchBrush
CreatePen
GetTextCharsetInfo
RestoreDC
CreateEllipticRgnIndirect
SetMapMode
SetViewportOrgEx
GetStockObject
CreateDIBitmap
Exports
Exports
?IXqbxzjqg@@YGPAIF@Z
?KEpmImwbecqqhMxubsDioz@@YGMIF@Z
?ltsgceEk@@YGXK@Z
?ewoOXTjy@@YGPAKI@Z
?SpddNureheTeLfDnua@@YGPAKPA_N@Z
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 827B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ