P:\sqmzxuo\iPSkZWrIp\nvOwzqdatzxim.pdb
Static task
static1
Behavioral task
behavioral1
Sample
dc0fae35bc737008b77fe30a3b07c8b6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc0fae35bc737008b77fe30a3b07c8b6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dc0fae35bc737008b77fe30a3b07c8b6_JaffaCakes118
-
Size
149KB
-
MD5
dc0fae35bc737008b77fe30a3b07c8b6
-
SHA1
38d2990d0943a3a2c52abdb0422476e079747551
-
SHA256
e90a77a4435214e9b7cac80c4b817065e248ee582f442cb12178ec8a42b1ced9
-
SHA512
344b2c162d043f0280abaa4bcab1e661abfcb38bd2c451e92f034d297c892acd0e2ac9fab6ec2f490cf4b1367cf5c9e2214733df29a979dd04978696090a1f3a
-
SSDEEP
3072:zPOmaNB8dpmIJHbj0gSjTNwPtCwecuwyM1WvxR4ckv99QR9bT0DFkY5Tzqf:rOzkpmIlk/jTNG0wepwyMgvkcW9SFE9M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc0fae35bc737008b77fe30a3b07c8b6_JaffaCakes118
Files
-
dc0fae35bc737008b77fe30a3b07c8b6_JaffaCakes118.exe windows:5 windows x86 arch:x86
318d6316cf960a89fc9de469085e11b7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
FindWindowW
OffsetRect
IsWindowEnabled
SetFocus
GetClientRect
AdjustWindowRect
ntdll
RtlCompareMemory
kernel32
FileTimeToSystemTime
SetCommState
GlobalDeleteAtom
EnumResourceNamesA
FindResourceW
GetNumberFormatA
lstrcatW
GlobalReAlloc
GetLastError
GlobalGetAtomNameA
VirtualFree
GetTimeFormatA
TlsGetValue
Exports
Exports
?FileIsMove
Sections
.text Size: 150KB - Virtual size: 149KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE