P:\TkhFi\Hubg\EioVUz\lDZbJj\Jjmpf.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e2743528218828389b5ff627e39b473f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e2743528218828389b5ff627e39b473f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e2743528218828389b5ff627e39b473f_JaffaCakes118
-
Size
58KB
-
MD5
e2743528218828389b5ff627e39b473f
-
SHA1
e59f82454e9a7e96bc4418351f95013d1bfb203a
-
SHA256
cd2cd6754e65539becaab7332ae533ac5821fa06066f9c17364527c9b4ff68dc
-
SHA512
5841f40449ed32443b0305d2e00b38f67f6640e0c062f43d1f33b6b33e06833083db270f659a6b49355e8e9dea3f7a5fed53dd211d88afecc2cc7d26c4af0f00
-
SSDEEP
768:rm3mlx/JXbQDDtlRV+ogZQTaYgiwykjOIG/PqD5LNjem4Wazh8OwSyj0AzjVjpQY:rm3gKlCbiW9yFn8fsNGj0YUlVW9N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2743528218828389b5ff627e39b473f_JaffaCakes118
Files
-
e2743528218828389b5ff627e39b473f_JaffaCakes118.exe windows:5 windows x86 arch:x86
a61a6a1be77248fbcd4cff9e6521d6d4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
GetClassLongW
GrayStringW
GetActiveWindow
RegisterClassExW
AdjustWindowRect
GetMonitorInfoW
GetDlgItemInt
IsIconic
wsprintfW
ClientToScreen
PeekMessageA
GetMenuItemInfoW
gdi32
SetDIBColorTable
GetTextExtentPoint32A
CreateRoundRectRgn
GetTextColor
GetBitmapBits
CreateHalftonePalette
SetPixel
ScaleViewportExtEx
RemoveFontResourceW
shlwapi
StrSpnW
PathGetArgsW
kernel32
MoveFileA
InterlockedExchangeAdd
LocalLock
ExitThread
WaitForSingleObjectEx
GetComputerNameExA
OpenFile
ClearCommBreak
OpenEventW
VirtualQueryEx
SuspendThread
IsDBCSLeadByte
LCMapStringW
GetTempFileNameW
Exports
Exports
?zyzfhycJl@@YGPAKFPAE@Z
?kubyWgNlCguzZiUn@@YGPAGD_N@Z
?rfgZrcGgioO@@YGFPAGJ@Z
?hinMReBksguzfhctqae@@YG_NPAKG@Z
?qLamwyBfgccffQVJxrJozr@@YGGPAF@Z
?kTKmMtauxdof@@YGPAXD@Z
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 512B - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ