Z:\iJauWNvjW\lphbcrJKvxx\kcEqmlrurAtrh.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fec71f28706b38e4176729c411dd2475_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fec71f28706b38e4176729c411dd2475_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fec71f28706b38e4176729c411dd2475_JaffaCakes118
-
Size
148KB
-
MD5
fec71f28706b38e4176729c411dd2475
-
SHA1
ec87a17823f0484f6508225894e12232a41644f1
-
SHA256
b2f9727de2173d0c9385cedd01e102a2c16303e7de8d09409a8052928921a2f3
-
SHA512
96808bd4df23af2d11924bc1fef801a8905f19f2117b802d56134b36a597eb8910d902594e2cf800dd1c33888eacf368120766274b23152bce9969760d789a2c
-
SSDEEP
3072:mH37w9T9EKMdX1B80Y/b3zihucsMdmUodkKTaU2GlP:20FMdXtY/b3ehucgUoRNZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fec71f28706b38e4176729c411dd2475_JaffaCakes118
Files
-
fec71f28706b38e4176729c411dd2475_JaffaCakes118.exe windows:5 windows x86 arch:x86
b487982b69d7a9e74d544230dd6e7803
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
SetThreadPriority
UnlockFile
GetLastError
GetFileSize
SearchPathA
ConnectNamedPipe
GetSystemTime
FreeLibrary
SetUnhandledExceptionFilter
GetFileAttributesExA
LoadLibraryA
EnumResourceLanguagesA
GetCurrentDirectoryA
user32
GetSysColorBrush
ReplyMessage
SystemParametersInfoW
ShowCaret
GetMessageTime
GetMenuCheckMarkDimensions
CopyAcceleratorTableW
SetMenu
FindWindowExW
FillRect
GetScrollRange
SetWindowLongW
FindWindowExA
SetWindowPos
DrawEdge
ShowOwnedPopups
GetTopWindow
ActivateKeyboardLayout
gdi32
CreateDCW
OffsetViewportOrgEx
SetBkColor
GetTextAlign
GetTextExtentPointA
CreatePalette
GetCharWidth32W
comctl32
ImageList_GetIconSize
ImageList_SetIconSize
PropertySheetW
comdlg32
PrintDlgW
CommDlgExtendedError
ChooseColorW
console
CPlApplet
shell32
ord256
ord80
ord11
Exports
Exports
?LoadBitmapTestIt@@YGKHRA_WK@Z
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data_i Size: 512B - Virtual size: 435B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 980B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data_m Size: - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ