Z:\yiFjewASqyf\Fuqrkqq\bvngJfrWqeavk\wyaCfrcjui.pdb
Static task
static1
Behavioral task
behavioral1
Sample
dc897e56e354e194be964ade2037f428_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc897e56e354e194be964ade2037f428_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dc897e56e354e194be964ade2037f428_JaffaCakes118
-
Size
162KB
-
MD5
dc897e56e354e194be964ade2037f428
-
SHA1
d260859ef61cabf5bde0c84814a2d42766fe597a
-
SHA256
9930b252936e3714d4770dbb36c61191248b19e95ac551a129483ccf33ae6a5f
-
SHA512
205ffdaf0935a009da674899aabf16bd6cdf3fcf3484fc93561bd97b501f35c84f40e6ae6d5f9483beb3b9132670c6b52ee20a6be03ad13f979827488c3075c5
-
SSDEEP
3072:fPOCIWMBdV1Lq+EsGT7kpkTxucNu7qzuckw8XYz4E8eEAbSf6Me:HOlfq+EXvkWdNOqzuPw8XYzdiA46f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc897e56e354e194be964ade2037f428_JaffaCakes118
Files
-
dc897e56e354e194be964ade2037f428_JaffaCakes118.exe windows:5 windows x86 arch:x86
318d6316cf960a89fc9de469085e11b7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
FindWindowW
OffsetRect
IsWindowEnabled
SetFocus
GetClientRect
AdjustWindowRect
ntdll
RtlCompareMemory
kernel32
FileTimeToSystemTime
SetCommState
GlobalDeleteAtom
EnumResourceNamesA
FindResourceW
GetNumberFormatA
lstrcatW
GlobalReAlloc
GetLastError
GlobalGetAtomNameA
VirtualFree
GetTimeFormatA
TlsGetValue
Exports
Exports
?FileIsMove
Sections
.text Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE