F:\ppUzdaco\fKRqGprdxWbi\vjWlumKymka\xtumCpiHmcAI\hVivtxZ.pdb
Static task
static1
Behavioral task
behavioral1
Sample
dc6c6dfb6221c70582f012af57befb8e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc6c6dfb6221c70582f012af57befb8e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dc6c6dfb6221c70582f012af57befb8e_JaffaCakes118
-
Size
159KB
-
MD5
dc6c6dfb6221c70582f012af57befb8e
-
SHA1
4f9613a7be163e74a306015d82aa0868ffb1b1e0
-
SHA256
9634ff728f556ff72ebf38996ef159549b4a099b0fb0f97064f6bedd45845e4d
-
SHA512
7d3da5d86839627c9d0cad3b463992676fc04c0a508e4b3078f2c8e9aa7905f1e4f049d368fa91ce8063a073e98206c52295050d894d4b6657d72c17987feabc
-
SSDEEP
3072:tFQPzPJSDKHJp6+J49AERS+SEizDHzrFb4ib0CYZ8wjhRlsg4xfUmyY+ya3t:XQTseHJpD2S+hCHzhFRSBjVSfP+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc6c6dfb6221c70582f012af57befb8e_JaffaCakes118
Files
-
dc6c6dfb6221c70582f012af57befb8e_JaffaCakes118.exe windows:5 windows x86 arch:x86
cfaf18892c1e93ad80bca6ffbc1b5ad3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
ShowCaret
GetForegroundWindow
CallWindowProcA
GetMessageTime
UpdateWindow
FindWindowA
ShowOwnedPopups
GetKeyNameTextW
GetDialogBaseUnits
ReplyMessage
GetTopWindow
SetDlgItemTextW
GetNextDlgTabItem
GetDesktopWindow
CharLowerW
LoadMenuW
GetActiveWindow
kernel32
EnumResourceNamesA
GetLocaleInfoW
GetModuleHandleW
LocalUnlock
FindResourceExW
lstrcmpW
SetCurrentDirectoryA
GetCommTimeouts
Exports
Exports
?GetValidated
Sections
.text Size: 154KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vbf Size: 512B - Virtual size: 107B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iuy Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mjh Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ghj Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE