O:\miRwcRtq\ayTKLOQy\ilJzWd\LwTo\ywMFzNwJ.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0d4f576237d5ef0f318f31db970ee7ee_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0d4f576237d5ef0f318f31db970ee7ee_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0d4f576237d5ef0f318f31db970ee7ee_JaffaCakes118
-
Size
196KB
-
MD5
0d4f576237d5ef0f318f31db970ee7ee
-
SHA1
45d51e31e4eed67cee60d78590b835576aeaf46b
-
SHA256
b1f38990361f771fb3fb04b42a48d212fc8709d775d149121191fd3b7a1402ec
-
SHA512
3f45df6cb76ece508d6d7719f4b658452219e42f0eb057ab2dbbd9b5193f25a8f8da566f3c3f99349fa3e01223a445690480e03de5ff840ba239372c464a7db0
-
SSDEEP
3072:4Zs5HHs56/+EdCNNNSemMpFMG1XF/aB6kXCU0NaoZOmh+F5H8+17cTEs9NwLas:OsVqDNiGT1t00NLoxnuoqmL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d4f576237d5ef0f318f31db970ee7ee_JaffaCakes118
Files
-
0d4f576237d5ef0f318f31db970ee7ee_JaffaCakes118.exe windows:5 windows x86 arch:x86
8ca7b6fead328235413cabea0336ad4e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
VirtualAlloc
GetFileAttributesA
CreateThread
GetComputerNameExA
FileTimeToLocalFileTime
LoadLibraryA
lstrcmpiA
FlushFileBuffers
GetComputerNameW
CancelWaitableTimer
GlobalAddAtomA
OpenEventW
lstrlenA
user32
KillTimer
SendInput
MapVirtualKeyExA
InSendMessageEx
DrawEdge
GetWindow
GetCaretBlinkTime
LoadStringW
CreateMenu
GetIconInfo
ShowOwnedPopups
GetMenuStringA
GetKeyState
GetForegroundWindow
shlwapi
PathRemoveArgsW
ChrCmpIW
PathGetArgsW
StrCmpW
gdi32
GetTextAlign
SetWindowOrgEx
RectInRegion
GetLayout
SetAbortProc
TextOutW
EnumFontFamiliesExW
Exports
Exports
?sfcjbtwkXb@@YGIJPAK@Z
?ttFhcCx@@YGPAJPAF@Z
?vfofNpcOdedWm@@YGPAFGI@Z
Sections
.itext Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
CODE Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 159KB - Virtual size: 239KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ