F:\dgBGrEq\XBYShYW\lzppoXGwfu.pdb
Static task
static1
Behavioral task
behavioral1
Sample
de0dde0e93a17481e186d1ef03cb6570_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de0dde0e93a17481e186d1ef03cb6570_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de0dde0e93a17481e186d1ef03cb6570_JaffaCakes118
-
Size
218KB
-
MD5
de0dde0e93a17481e186d1ef03cb6570
-
SHA1
04cb8b61ac669ea3b191668a178bb1841dbb14db
-
SHA256
41f42038fdde89912a46786b24d38c30664631b0b532c46f2193f128f4e14ea3
-
SHA512
bd8d6c78e1ecb3d739d4f19902afd6d65fa1f58fe4d9a0fd62ef6fbcdce1b14085eac8b121a009325e26603cd554832a1f441b27ec5db1d543da7f615f71a4dd
-
SSDEEP
3072:KwYsa3yrWph+dmdzv03GlJT/TnWHEo9cr2swh2N6Y0Pu3mCw6AgX0WjD9QkK5HNU:KshVdmy3GzTbWwrzNs5v6AmHjxBlFH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de0dde0e93a17481e186d1ef03cb6570_JaffaCakes118
Files
-
de0dde0e93a17481e186d1ef03cb6570_JaffaCakes118.exe windows:5 windows x86 arch:x86
132d514736490ba10db1f897d1a0299b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
OffsetRgn
OffsetViewportOrgEx
GetSystemPaletteUse
TextOutW
GetTextExtentPointA
GetTextExtentPoint32A
GetDIBits
SetRectRgn
CreateHalftonePalette
CreatePalette
GetTextAlign
PathToRegion
GetDeviceCaps
DPtoLP
CreateFontA
SetDIBitsToDevice
version
VerQueryValueW
GetFileVersionInfoSizeA
comdlg32
GetSaveFileNameW
PrintDlgExW
GetFileTitleW
GetOpenFileNameA
ChooseColorW
msvcrt
memcpy
kernel32
GetCompressedFileSizeW
GetModuleHandleA
OpenEventW
UnhandledExceptionFilter
SearchPathW
OpenFileMappingW
FindResourceA
GetShortPathNameW
LoadLibraryA
ReleaseMutex
GetUserDefaultLCID
SetCommState
SetErrorMode
HeapLock
GetComputerNameW
GlobalFlags
SetSystemTime
MapViewOfFile
user32
CharToOemBuffA
OpenInputDesktop
GetWindowPlacement
RegisterWindowMessageA
CharLowerA
SetScrollInfo
FrameRect
ModifyMenuW
LoadAcceleratorsW
DrawIconEx
DrawStateA
AppendMenuA
LoadImageA
IsWindow
SetPropW
IsRectEmpty
SetWindowTextA
GetAltTabInfoW
GetDlgCtrlID
HideCaret
wsprintfW
DialogBoxIndirectParamW
CharNextExA
ValidateRect
IsWindowUnicode
GetDialogBaseUnits
PostQuitMessage
BeginDeferWindowPos
CheckMenuRadioItem
GetSystemMenu
GetMenuStringW
ExitWindowsEx
UpdateWindow
CharToOemW
SetWindowPos
ScrollWindowEx
comctl32
InitCommonControlsEx
CreateToolbarEx
ImageList_Create
Exports
Exports
AlphaBlend
GradientFill
TransparentBlt
?SDOisioKJS@@YGKEPA_WG@Z
Sections
.text Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bld_1 Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bld_2 Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bld_3 Size: 1024B - Virtual size: 651B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bld_4 Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.debug Size: 512B - Virtual size: 86B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ