W:\drdgguArZrdQ\vdPQjywktJdl\kgbNdeinMlE.pdb
Static task
static1
Behavioral task
behavioral1
Sample
dc802537a730d8cb9f35324f07568c6b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
dc802537a730d8cb9f35324f07568c6b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dc802537a730d8cb9f35324f07568c6b_JaffaCakes118
-
Size
176KB
-
MD5
dc802537a730d8cb9f35324f07568c6b
-
SHA1
16183c60bf5ee7f9e8dad33a10f9a0d9ba71133a
-
SHA256
faf4dfc401773c49e7c8cbf804d0cbedd8df99c23482f5d956002f9eacf2f1d8
-
SHA512
e37f0e850c1fb300176e26caf2269ffd702dc89c59bc0207b8981fc42295bc1805b796b1b9a5ab5d5a6a917184bdb5f894a413ad1b0a534161ec07b1ead17788
-
SSDEEP
3072:Xm2GAdKbS/VAWcnS9sPPYH74z5h+vNNITt3gue2DiyadPCxukhf8U:2Af/VFUDPPxcl8uWDiy2PdkR3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc802537a730d8cb9f35324f07568c6b_JaffaCakes118
Files
-
dc802537a730d8cb9f35324f07568c6b_JaffaCakes118.exe windows:5 windows x86 arch:x86
082839249cb5db2296ca225d43ae0b6a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
IsWindow
GetActiveWindow
GetFocus
SetFocus
OffsetRect
IsWindowEnabled
GetWindowRect
ntdll
RtlCompareMemory
kernel32
GlobalGetAtomNameA
GetSystemTimeAdjustment
IsDBCSLeadByteEx
ConvertDefaultLocale
ExitThread
MoveFileExW
GetThreadContext
FindResourceExW
GetSystemDefaultLangID
GetShortPathNameW
VirtualProtect
CallNamedPipeW
gdi32
SetDIBColorTable
SetAbortProc
AddFontResourceW
SetBkColor
TextOutA
GetClipBox
CreateICW
GetWindowOrgEx
CreateCompatibleBitmap
DeleteObject
CreateDCW
Exports
Exports
?InsertFil
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fxc Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fx Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ