F:\ZptwguR\yiZdEHg\GzbFE\qqgmH.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fee28ecd839ab4a2eb561ae55885a05e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fee28ecd839ab4a2eb561ae55885a05e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fee28ecd839ab4a2eb561ae55885a05e_JaffaCakes118
-
Size
39KB
-
MD5
fee28ecd839ab4a2eb561ae55885a05e
-
SHA1
dde63a35d302dacf7567c8c5c0d66288fcfd7eef
-
SHA256
3d623dcc19f3dedf42d117d247ebd977f999ed9862eb994388f9900f0d447c25
-
SHA512
0f94c768b99d574a5e9648220d041ce257bd0262a511c4a386b2090d4896847adbb2d41ec8cb2ebb41ffcaa5469cbdf91cb8fb3fee30ec53b6bfcffce38f8a39
-
SSDEEP
768:H5G8XLqFrjq3CxGXjxocWwcJ998Pdu65rLF0d/awQtxlLsMA:g87Cr2Zx1QrEGdywQ/lb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fee28ecd839ab4a2eb561ae55885a05e_JaffaCakes118
Files
-
fee28ecd839ab4a2eb561ae55885a05e_JaffaCakes118.exe windows:5 windows x86 arch:x86
9c2a95133fbf9ba4420089bbd095d732
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comdlg32
ChooseFontW
ChooseColorW
FindTextW
GetSaveFileNameA
kernel32
SizeofResource
GetFileAttributesExW
lstrcpyA
CreateWaitableTimerA
GetSystemDirectoryW
LockResource
GlobalAlloc
ExitProcess
shlwapi
PathCommonPrefixW
StrCSpnIW
PathCombineA
PathRenameExtensionA
gdi32
OffsetRgn
CreatePen
GetTextExtentPointW
GetCharWidth32W
SetDIBits
user32
InsertMenuW
DrawFocusRect
GetDlgItemTextW
SetLastErrorEx
FindWindowW
DrawEdge
ToUnicodeEx
InternalGetWindowText
PostMessageW
RegisterHotKey
KillTimer
LockWindowUpdate
IsWindow
Exports
Exports
?lWqkftbxzc@@YGPAIF@Z
?rXvmlbkcj@@YGJD@Z
?cmymwttFJmhmklrOzwhVp@@YGFPAM@Z
?ewfrjykbthlRIrpv@@YGIG@Z
Sections
.text Size: 512B - Virtual size: 156B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 193B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE