C:\osJo\BzgdD\rrzmfkT\endIz.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e27aa45c78e92c4eca803de6453a530a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e27aa45c78e92c4eca803de6453a530a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e27aa45c78e92c4eca803de6453a530a_JaffaCakes118
-
Size
110KB
-
MD5
e27aa45c78e92c4eca803de6453a530a
-
SHA1
d6ecf968c50514f3835b1a7912e0ca97b8570ae4
-
SHA256
942904b4279f526b11c60235c87e13fe2a637448e67ec2e43e7c3bf27d1224a3
-
SHA512
dbc298657c1d5f193d238ed267a074b547915d7436bc57d123469378f3178e853bd3881512e053e630a3048d264f7e70776ea6b23b770f77cff510b54ddfdfac
-
SSDEEP
3072:0T3AiEf/dz+Cw2NqQ8mHzyTJ0Rv2MKmrKc22TWbcOsq:0jHEdz+GNf8mHmT+x2Fmrl2Hc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e27aa45c78e92c4eca803de6453a530a_JaffaCakes118
Files
-
e27aa45c78e92c4eca803de6453a530a_JaffaCakes118.exe windows:5 windows x86 arch:x86
b8c4e91b61e65dda2f615c364d372ccb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
SetTextColor
CreatePen
PtInRegion
DPtoLP
GetCurrentObject
AddFontResourceW
EnumFontFamiliesW
kernel32
FoldStringW
HeapCreate
GetFileInformationByHandle
lstrlenW
DuplicateHandle
SetUnhandledExceptionFilter
lstrcmpW
lstrcmpiW
LoadLibraryW
GetProcAddress
DeleteCriticalSection
OpenEventW
shlwapi
StrCmpNW
user32
WaitForInputIdle
SetMenuItemBitmaps
GetPropW
SetWindowLongA
ShowScrollBar
GetWindowLongW
GetMenuItemID
IsCharUpperA
LoadCursorA
CharLowerA
MessageBoxExW
SetMenu
Exports
Exports
?MmOSsppMvxNxeqlNkdfYr@@YGDPAF@Z
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 846B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ