K:\oLolIJoxaKHM\iwzdekfpUkMwd\nlzdccaV\kfiocfmAgquGev.pdb
Static task
static1
Behavioral task
behavioral1
Sample
de1892d3324cf38150f57e83f77702d4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de1892d3324cf38150f57e83f77702d4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de1892d3324cf38150f57e83f77702d4_JaffaCakes118
-
Size
157KB
-
MD5
de1892d3324cf38150f57e83f77702d4
-
SHA1
306b78b35a1ebb51dba8e3168a0d5b0dbdd50f3c
-
SHA256
271829141165b99a63c8301660e998d80b364e5753f3de73d10dee6af8fcbc04
-
SHA512
ba15b8384be852eed1bb1110ee4cabfcbdddbab5e986f0682c50ab2737065f87efbe2bc312c855b21b0af599a8a334249965159b891ebfc2e1f29caff622be15
-
SSDEEP
3072:+lkgkiwHeLZNfOyZ16dfWsPnIZn2XqbyYAECVfYOXrPCpV18t/dIZKRKUooBLKod:+yDiwqdifR/IZn2XqbHAhF6pV+t/dDB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de1892d3324cf38150f57e83f77702d4_JaffaCakes118
Files
-
de1892d3324cf38150f57e83f77702d4_JaffaCakes118.exe windows:5 windows x86 arch:x86
137a9b4a6059d8b53e3c9d8dbb713fc9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
CreateRectRgn
GetRgnBox
kernel32
CreateFileMappingW
GlobalMemoryStatusEx
GetModuleFileNameW
GetComputerNameA
EnumResourceNamesW
VirtualProtect
CloseHandle
user32
SetWindowTextW
MonitorFromPoint
DefWindowProcA
GetUpdateRgn
TranslateAcceleratorA
SetMenuDefaultItem
TrackPopupMenuEx
WaitForInputIdle
SetFocus
AdjustWindowRect
EnableMenuItem
IsWindowEnabled
CopyRect
SetRectEmpty
FindWindowExA
ntdll
RtlCompareMemory
Exports
Exports
?TemporaryArrayCre
Sections
.text Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hvb Size: - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ek Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hv Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ