Y:\kcnzjp\buxIfch\whrctatw\eKKwfL\kadH.pdb
Static task
static1
Behavioral task
behavioral1
Sample
da7a4f24a73cc24260ad24e1176a9d35_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
da7a4f24a73cc24260ad24e1176a9d35_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
da7a4f24a73cc24260ad24e1176a9d35_JaffaCakes118
-
Size
157KB
-
MD5
da7a4f24a73cc24260ad24e1176a9d35
-
SHA1
9f21bcc405ebbc26ac71a2ef492e1ce00cf4a579
-
SHA256
7194f0954707ccd7904d934c0806c4d930877fa90732e58f34867e86082d2dc3
-
SHA512
e99a92140b40a31bdfa8807d168970b3902280d820779b14d45cbd033af2e024dceeb89c061d2373b548f8c8ac41dccf7c3579f56288ce729b1226dbbbc16deb
-
SSDEEP
3072:sMIipPYokqlbwefUkp/ZARKcSs0ABkhvLgq5ZItbFc6F6jjS6oUXo:sUZlbjUkpxAkABkh34tZVF6s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da7a4f24a73cc24260ad24e1176a9d35_JaffaCakes118
Files
-
da7a4f24a73cc24260ad24e1176a9d35_JaffaCakes118.exe windows:5 windows x86 arch:x86
2c108f8c6d27ecf648436ea4262ea14f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
StrToInt64ExW
user32
GetMenu
OpenIcon
SetDlgItemTextW
OemToCharBuffA
UnionRect
RemovePropW
GetKeyboardLayoutNameA
CharLowerBuffW
RegisterWindowMessageW
PostThreadMessageA
GetMenuItemInfoW
MapVirtualKeyExW
OemToCharA
gdi32
GetTextExtentPointA
TextOutW
RealizePalette
CreatePenIndirect
SetBitmapDimensionEx
Rectangle
kernel32
ExitThread
LocalLock
ConvertDefaultLocale
GetTickCount
GetWindowsDirectoryW
Sleep
SetCommState
CreateMailslotW
GetConsoleWindow
GetCurrentProcessId
GetDateFormatW
ExitProcess
Exports
Exports
?inqyaf_v__udoJSAIwguf@@YGMJPAF@Z
?prfsrS_nbjz@@YGPAXII@Z
?vzdxg_sgu__m____s@@YGENPAK@Z
?_gv_qwJJqfzuuh_rawh@@YGED@Z
?jtKWT_Q_E@@YGPAIHPAJ@Z
?YTR_W_d___b_N@@YGPA_NH@Z
?_ZHS_ZEJVEfmnXMl_czja@@YGXPAII@Z
?w_f__r_gm@@YGXPADE@Z
?CJHIG_RI@@YGPAGD_N@Z
?_hjE_YPKcbdxkQ@@YGPAXEE@Z
?XNDrskMe___ndy_@@YGNFE@Z
?rfvamxjnysr@@YGJGF@Z
?wenvbI_K@@YGPAII@Z
?LW_KQXzv_z_eP@@YGPAIEE@Z
?Jydmbp__y_NC_mq_w_@@YGPAXGK@Z
Sections
.text Size: 54KB - Virtual size: 385KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idat Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pacdat Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ