*#qyY=gePuf8ds5YOX5n|AhOEyeJQ.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ec17de6cc3039e47ec29c013fb2dbc81_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
ec17de6cc3039e47ec29c013fb2dbc81_JaffaCakes118
-
Size
140KB
-
MD5
ec17de6cc3039e47ec29c013fb2dbc81
-
SHA1
2d9806c426d9661340a738288a6503c7ba3b14c0
-
SHA256
c396aa4194907adb73d8d4d8e59793917ef1139cb0929c086229f6345ed8b09d
-
SHA512
e13cb1238256d9a5ae65d4544929ea76af47ed97ce371fd56b0faa3f5e0dc816f36b4bf4351b184098a53e47d45ae6558afa157df6f56a3282675ac70350bd44
-
SSDEEP
3072:/3IAGphNo+LXKdujI9sqvphO7jqYkXLASMhl9fBoAdoyK:/YjpfPXKdEqxY7dJRLoy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec17de6cc3039e47ec29c013fb2dbc81_JaffaCakes118
Files
-
ec17de6cc3039e47ec29c013fb2dbc81_JaffaCakes118.exe windows:6 windows x86 arch:x86
67d95b01b5af51b89d64b2612e3764cc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
strcmp
srand
user32
GetWindowInfo
GetWindowContextHelpId
GetDesktopWindow
EnumWindowStationsA
EnumThreadWindows
GetWindowRect
LockWindowUpdate
GetProcessWindowStation
CloseClipboard
DdeConnectList
ShowOwnedPopups
DdeAddData
oleaut32
VarCyFromI1
VarCyCmpR8
VarCyFromR8
powrprof
GetPwrCapabilities
gdi32
GetObjectW
GetTextExtentPoint32A
GetPixel
GetPaletteEntries
advapi32
EnumServicesStatusA
kernel32
InitAtomTable
lstrcmpW
GetTimeFormatW
GetFileTime
CreatePipe
FormatMessageW
FindNextVolumeMountPointW
EnterCriticalSection
SetConsoleOutputCP
GlobalAlloc
GetVersion
CloseHandle
GetCommandLineW
IsValidLocaleName
Module32FirstW
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 104KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 660B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ