A:\dTyl\Ebdfr\ygPcun.pdb
Static task
static1
Behavioral task
behavioral1
Sample
04b275715c178570e5e1f8459e08965a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
04b275715c178570e5e1f8459e08965a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
04b275715c178570e5e1f8459e08965a_JaffaCakes118
-
Size
470KB
-
MD5
04b275715c178570e5e1f8459e08965a
-
SHA1
140261f701c57fd5775ba7c1250d7f2f25cbaca6
-
SHA256
9af8508e5eb97cf449fd50fb84316a85bae122c3c1c1b31331f7a8b9cc6a425e
-
SHA512
3983f77451fc3ce0cfbe88da1662332327cbef330850cac4380e44e534dd85e6fc4ac9990ff982d37b2690bc623feffa209970ae1fd240ab3485bb084139ddab
-
SSDEEP
12288:/3ulWVX3EVHQom8auI6S3OdrIXX2a78pfv6GVEcCpz4DB:/dHEFQrRuI6IO4bgpfSmElS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04b275715c178570e5e1f8459e08965a_JaffaCakes118
Files
-
04b275715c178570e5e1f8459e08965a_JaffaCakes118.exe windows:5 windows x86 arch:x86
5c5dcfcd1827bb2f2b0d1ca6ecf69f8f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
CreateStatusWindowW
ImageList_Write
user32
DrawIconEx
DrawTextW
ReleaseDC
GetForegroundWindow
SendInput
RegisterHotKey
EndDialog
SendDlgItemMessageW
DialogBoxParamA
DeleteMenu
GetClipCursor
GetCaretPos
kernel32
CompareStringW
DeleteFileA
DeleteFileW
LocalAlloc
GetLongPathNameW
WaitForMultipleObjects
SetFileApisToOEM
GetFileAttributesA
GetStringTypeA
OpenFile
OpenFileMappingW
GetTempFileNameW
gdi32
SelectClipRgn
CreateRectRgnIndirect
SetViewportOrgEx
TextOutW
LPtoDP
DeleteObject
GetBkMode
StretchDIBits
PtInRegion
Exports
Exports
?RRDtJoGNqdSYjBVom@@YGPAEH@Z
?yhzwBVvh@@YGGMH@Z
?hgFllFpo@@YGPA_NKPAF@Z
?LgjunmwxxBao@@YGPAIJG@Z
?ecigqDsVqbjlQibqejkFvt@@YGFPAH@Z
?KhwQeqQnYlfmmpPOyQde@@YGEMF@Z
?NvZdCIkWckoMch@@YGFJ@Z
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 428KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ