A:\cgmz\BBoL\Cgdcpr\oJOw.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e199deda22cc754db6079ba5b53a2183_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e199deda22cc754db6079ba5b53a2183_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e199deda22cc754db6079ba5b53a2183_JaffaCakes118
-
Size
134KB
-
MD5
e199deda22cc754db6079ba5b53a2183
-
SHA1
8afeb6fb52a04e788a32e7d15b740a6c7d29ccbd
-
SHA256
96ddad3c8518d21f0e4439a53b2d2e320a11ec2f22b42f68c07cd45700e42d79
-
SHA512
92e47ef8ecfadbff2dce6ca40992263700b876c134091e9407bee2cc7d6a691668ec7236761868c632beded02dad74e2013d79239232034a3916743cf21fd2d1
-
SSDEEP
3072:uDfjjfVoZpaMDDZX+G+0Kkd53dT4A3y7Eaygwjw7vS7:EXyZp/hIqNT4f4kG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e199deda22cc754db6079ba5b53a2183_JaffaCakes118
Files
-
e199deda22cc754db6079ba5b53a2183_JaffaCakes118.exe windows:5 windows x86 arch:x86
f3e3a8d342e251983334c0a4498eb548
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetUserDefaultLangID
GetAtomNameA
AddAtomA
GetFileAttributesA
lstrcmpiW
LoadLibraryW
GetFullPathNameW
VerSetConditionMask
SetPriorityClass
RemoveDirectoryW
lstrlenW
GlobalFree
GetProcAddress
user32
CreateWindowExA
ExitWindowsEx
GetPropW
UnionRect
PostThreadMessageW
ShowScrollBar
GetKeyNameTextW
PostQuitMessage
IsWindow
DialogBoxIndirectParamW
GetWindowLongW
GetKeyboardLayout
GetClassNameW
DrawTextW
gdi32
GetCharWidth32W
GetObjectW
OffsetRgn
SetLayout
StretchBlt
GetNearestColor
GetPaletteEntries
GetTextExtentPoint32A
comctl32
ImageList_Write
ImageList_Draw
ImageList_Remove
CreatePropertySheetPageA
shlwapi
StrCmpNW
comdlg32
GetOpenFileNameA
CommDlgExtendedError
ReplaceTextW
PrintDlgW
Exports
Exports
?VtIDmDir@@YGPAIPAMPAI@Z
?GOZwDeeqObgkF@@YGPAIPAKPAD@Z
?pCeByrcbauctglLCc@@YGJPAGPAG@Z
?BdAqsenxPktulixaC@@YGXI@Z
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 211B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ