C:\HomykafaaamhoeldabfurupRipeIdle\DouxLunkinWebsdimpanshonadeIdle\PerpFardopMadebanasLairmoxuexec\SlayReelesbentilsotdeirmoxuexec\gibAltsmopsupyommenaeirmoxuexec.pdb
Static task
static1
Behavioral task
behavioral1
Sample
00dc429c3968cb97ee85ce7a7b1604ec_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
00dc429c3968cb97ee85ce7a7b1604ec_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
00dc429c3968cb97ee85ce7a7b1604ec_JaffaCakes118
-
Size
196KB
-
MD5
00dc429c3968cb97ee85ce7a7b1604ec
-
SHA1
be4f3b0706916794d9fddb45cd511f1f3809e76e
-
SHA256
d406ec669d037ece7663bdd3e370f685121581e21a99553312b1d8f06b825483
-
SHA512
4f9bf14ac7db763e48fd76cafb47f0bd63e4d47c599dde5b8a87178df4f59808d7974128f0e7a3c6652471795ba120f6df9c308cdf84f20b6fc47740c5e63d50
-
SSDEEP
6144:QCjXzpvxCqElKfk7WOoBO35FYPBxIiSWMdKY:QCXpvxCqEl27eaPY1WMd9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00dc429c3968cb97ee85ce7a7b1604ec_JaffaCakes118
Files
-
00dc429c3968cb97ee85ce7a7b1604ec_JaffaCakes118.exe windows:5 windows x86 arch:x86
ae87acbcc01cee90a65c854e510a597e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
CharLowerBuffW
SetMenuItemBitmaps
MapDialogRect
RegisterWindowMessageW
MessageBoxExA
RegisterClassExA
CopyAcceleratorTableW
GetKeyNameTextW
CharNextA
RegisterClassExW
GetMenuItemID
GetClassInfoW
IsDlgButtonChecked
InvalidateRect
GetMessageExtraInfo
SendMessageTimeoutA
InflateRect
gdi32
SetPaletteEntries
CreateBitmap
CreateBrushIndirect
CreateDiscardableBitmap
GetMapMode
CreateSolidBrush
PatBlt
SetWindowOrgEx
shlwapi
PathIsFileSpecA
kernel32
CreateSemaphoreW
GetHandleInformation
WaitForMultipleObjectsEx
IsBadStringPtrW
QueryPerformanceCounter
GetLocaleInfoA
LoadLibraryExA
SetCurrentDirectoryW
Exports
Exports
ModifyTaskA@4
IsStringExW@8
CallKeyNameOriginal@12
CancelThreadW@12
GetSectionOld@8
Sections
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 191KB - Virtual size: 190KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 528B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ