X:\uGuuzlH\oRHeHwpFvucns\xxprELgz\hhiqARBv.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ebe639792ca748ddf10973c55c8542a8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ebe639792ca748ddf10973c55c8542a8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ebe639792ca748ddf10973c55c8542a8_JaffaCakes118
-
Size
134KB
-
MD5
ebe639792ca748ddf10973c55c8542a8
-
SHA1
f9e6679780c5066375d044b6128743cd5fdd6041
-
SHA256
ec924525b9efc60454517fe0df97a46b971a62386c67a1534ae05d3c69ccb13a
-
SHA512
65d8cbe57d706e6f207405e0275b9294c7fcd4ffb304391ef2fd97356a9534d830938516a63cd675cc438bb757e577cc0fbea303c2b4dbee5b2e1a882743ef98
-
SSDEEP
3072:NbZ6ctc0jdqCg5OHJNnfsrI6RBVsQ7AUi6GCxuerN9HxSYWUU55T5:CctTHJNnkDBV579sC9r5SpUA5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebe639792ca748ddf10973c55c8542a8_JaffaCakes118
Files
-
ebe639792ca748ddf10973c55c8542a8_JaffaCakes118.exe windows:5 windows x86 arch:x86
8f5a9872f8e8e2ccfd8cfdae28d70f3f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
_controlfp
__set_app_type
memset
iswspace
__p__fmode
__p__commode
_amsg_exit
_initterm
_ismbblead
atoi
fputc
_XcptFilter
strstr
_exit
_cexit
_wtoi
__setusermatherr
__getmainargs
kernel32
GetModuleHandleA
SetErrorMode
GetCurrentDirectoryW
lstrlenA
GetSystemDirectoryW
FindResourceExW
GetModuleFileNameA
SetCommState
LoadLibraryA
SetFileAttributesW
gdi32
GetTextExtentPoint32W
DPtoLP
Polygon
CreateHatchBrush
LPtoDP
shlwapi
StrCmpIW
ChrCmpIW
UrlGetLocationW
user32
RegisterClassA
IsCharUpperW
CharLowerA
DispatchMessageW
wsprintfW
GetWindowDC
MonitorFromPoint
ScreenToClient
SetWindowLongA
Exports
Exports
?CreateDlgMessage@@YGHPAXPADK|U
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ort Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 104KB - Virtual size: 230KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE