B:\gTpgobmC\tTslfB\opmz\MYQEW\oetwoi.pdb
Static task
static1
Behavioral task
behavioral1
Sample
dd240ea4986ae663b0b13f782aceb788_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd240ea4986ae663b0b13f782aceb788_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dd240ea4986ae663b0b13f782aceb788_JaffaCakes118
-
Size
135KB
-
MD5
dd240ea4986ae663b0b13f782aceb788
-
SHA1
ec81cd57ed310da3d3cc71b45ee9ed221eb61f01
-
SHA256
78b6c2b91314084edbb2945323fc23577b28bb13b144e3ebab8cb9d887288a95
-
SHA512
160f77a0942e4813f90a19f520d1e7c851f548c27a44e084d5491a8835c65d1be8d3c057697cf6dd5a821e487123c191d379b26186c1d2ac31aa92f962427fb4
-
SSDEEP
3072:IFlRoTOsZtcWKSq+/fqGS4zG+v1yMfvK0iFwUTSZJZw:FTTZ1qMf1SKFw8K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd240ea4986ae663b0b13f782aceb788_JaffaCakes118
Files
-
dd240ea4986ae663b0b13f782aceb788_JaffaCakes118.exe windows:5 windows x86 arch:x86
0b26e0ff3e471faaaf81acb972c18203
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
ImageList_AddMasked
ImageList_ReplaceIcon
gdi32
SetDIBits
CreateICW
SetStretchBltMode
GetTextExtentExPointW
OffsetViewportOrgEx
EnumFontsW
EndPage
SetViewportOrgEx
shlwapi
StrCmpNA
kernel32
GetProcAddress
lstrlenW
lstrlenA
VerifyVersionInfoW
ConnectNamedPipe
GetOverlappedResult
MoveFileW
InitializeCriticalSection
EnumResourceNamesW
lstrcmpiA
GetWindowsDirectoryW
LocalSize
FindClose
LoadLibraryW
user32
SetForegroundWindow
RegisterClassExW
RegisterClassExA
OemToCharBuffA
CascadeWindows
IsCharUpperA
GetPropW
SetDlgItemTextW
GetWindowLongW
CharPrevA
EnumWindows
ReplyMessage
InflateRect
ShowScrollBar
Exports
Exports
?ZlGqaewmQFd@@YGKKE@Z
?oOoFckFvQ@@YGPAFIF@Z
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 121B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ