J:\ujoEfT\hZqeHMyH\acpmx\UdrVWoe.pdb
Static task
static1
Behavioral task
behavioral1
Sample
eb339fde658b59f7113c284d773eb184_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb339fde658b59f7113c284d773eb184_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eb339fde658b59f7113c284d773eb184_JaffaCakes118
-
Size
112KB
-
MD5
eb339fde658b59f7113c284d773eb184
-
SHA1
ff57cb9a67208e1fc6c1878143810e6c7e77f7d9
-
SHA256
50b6433def58b4807ca02c3ec9289062a81c7478b1124d9d83e70da93ac5e4c8
-
SHA512
ea120478e8f9ccf0523cccf95520a8e3e02ee407d73b7e24a069111509a865563053d9a935bcd2f709864f8ac798c3b6449b6573363aa5cc81c9e316d924d6ee
-
SSDEEP
3072:Ohqu0kHUb/BM4ZXyC7buQW7lPEfwuzVPc2:iqkHUb/BM3CX+P4wu502
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb339fde658b59f7113c284d773eb184_JaffaCakes118
Files
-
eb339fde658b59f7113c284d773eb184_JaffaCakes118.exe windows:5 windows x86 arch:x86
9684b5814c28c64fea23804c6a13743a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
ImageList_GetImageCount
ImageList_Remove
ImageList_LoadImageW
user32
CheckMenuItem
CheckRadioButton
CharToOemBuffA
GetPropW
GetWindowLongW
IsCharUpperA
FindWindowExA
ShowScrollBar
GetClientRect
GetKeyboardLayout
PostThreadMessageW
SetScrollPos
CharUpperBuffW
DrawFocusRect
gdi32
CreatePenIndirect
PolyBezier
GetPixel
GetCurrentObject
EndPage
DPtoLP
SetDIBitsToDevice
kernel32
GetProcAddress
MulDiv
RegisterWaitForSingleObject
CreateWaitableTimerA
LCMapStringW
FlushFileBuffers
lstrlenW
FlushViewOfFile
LoadLibraryW
SetNamedPipeHandleState
GetCommConfig
lstrcmpiW
shlwapi
StrCmpNW
Exports
Exports
?TnocmGCqhkyxupsTuphFx@@YGPADF@Z
?pddRhmebecFupyt@@YGIGN@Z
?GhGzXfyygtWrJNrea@@YGHM@Z
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 173B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ