K:\xdQrGGdb\PktOOqyb\xwtHh\kfCiwHS\iGyf.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fb77b9ceef0c817fece182e20fe5dd58_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb77b9ceef0c817fece182e20fe5dd58_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb77b9ceef0c817fece182e20fe5dd58_JaffaCakes118
-
Size
220KB
-
MD5
fb77b9ceef0c817fece182e20fe5dd58
-
SHA1
d4dc687e48887f777b5500ce984754866c9751d1
-
SHA256
4ee46a2761a7938a7a9903dea7eed76e54791380aa6d19ddba6916bc74001155
-
SHA512
872a07909cb4ccafe4eaa0884d50b817deed1bcacb2520b51c9aaf9ebd3aa6f8d95c94c9796d1a114ce5c0e6435cf36ecec2cd6a3e72547e392398eeecd6a191
-
SSDEEP
3072:I0FSuszXGFeyl6OgbzTsfLf2OHw74M8KxVqV5az8cXAg0lvJG8ECa9UMc1/d:dVTFeA6O5La74YWV5h4IVty
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb77b9ceef0c817fece182e20fe5dd58_JaffaCakes118
Files
-
fb77b9ceef0c817fece182e20fe5dd58_JaffaCakes118.exe windows:5 windows x86 arch:x86
034596c2c6a65f5c6fc673ae5df02e20
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
StretchDIBits
CreateDIBSection
SetLayout
SetDIBColorTable
SetBrushOrgEx
CreateDiscardableBitmap
comdlg32
GetOpenFileNameW
ChooseFontW
shlwapi
PathFindExtensionA
user32
SetFocus
LoadCursorW
LoadImageW
GetNextDlgGroupItem
LoadImageA
IsCharLowerW
OpenInputDesktop
EnableScrollBar
MonitorFromRect
IsIconic
FrameRect
DrawAnimatedRects
kernel32
FlushFileBuffers
GetSystemWindowsDirectoryW
CreatePipe
GetThreadContext
GetCurrentProcessId
lstrcatA
OpenFileMappingA
GlobalFree
Exports
Exports
?uxzhhtw_fmg_@@YGFGPAI@Z
?__thef_pUpmxSu@@YGHG@Z
?BTOQ_QuwUP__QHanvVdr_@@YGEPAHI@Z
?xcv__XKT_H@@YGKKPAH@Z
?a_lfly_h__aWPW__X_TNFU@@YGPAEIJ@Z
?JU_X_WJC_N_KRPO_FC@@YGJD@Z
?____vlpRENJ_MCm_af@@YGPAFPAMPAI@Z
?swkusxcos_eda@@YGPAKPAFD@Z
Sections
.text Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 187B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA1 Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA2 Size: 77KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ