V:\tull\pvjc\Ujuv\Sixt.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0f8225c2bade21c045d704a9cbc78e8c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0f8225c2bade21c045d704a9cbc78e8c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0f8225c2bade21c045d704a9cbc78e8c_JaffaCakes118
-
Size
51KB
-
MD5
0f8225c2bade21c045d704a9cbc78e8c
-
SHA1
19dcd0c2fc5b66283c7a381b4cb49fb32d183b11
-
SHA256
8bba357204c057910e25f065c2952ef1b7a298273b287b87f0da9543649092d6
-
SHA512
07022494ba3855af4b38b59e6e56fc3fd4a54ce5fcf29e2807547f5da39c7c53446905698fd556a4b467bc8cf620477328d842630dc2d17bc282419c3c301829
-
SSDEEP
768:LfUYq1sSX4AIUS7FBBBpH4RwHRiDvfpVLJ1uHfLEb2hqQOWB9:LsnGSX40cB3H4Rkirplue2+WB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f8225c2bade21c045d704a9cbc78e8c_JaffaCakes118
Files
-
0f8225c2bade21c045d704a9cbc78e8c_JaffaCakes118.exe windows:5 windows x86 arch:x86
7bb52e28779afdbb7618dd5ffe8d4e55
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
CreateDialogParamW
AppendMenuW
DestroyCaret
CopyImage
CreateIconIndirect
GetForegroundWindow
ExitWindowsEx
GetMenuItemCount
LoadIconW
wsprintfA
SetWindowPlacement
SetActiveWindow
CreateMenu
kernel32
AddAtomW
lstrlenA
GetAtomNameA
GlobalDeleteAtom
IsValidLanguageGroup
CopyFileA
FindNextChangeNotification
GetTempPathA
DeleteFileW
FindFirstFileA
FormatMessageW
WaitCommEvent
FindClose
HeapAlloc
gdi32
SetStretchBltMode
CreateRoundRectRgn
GetObjectA
Ellipse
SetTextAlign
GetTextMetricsW
SetDIBitsToDevice
SetBitmapBits
CreateDIBitmap
Exports
Exports
?pYADmjyixunKaDI@@YGJPAEPAD@Z
?ZfnVnilxYmuiCSpsdkC@@YGPAJEK@Z
?bksYItwhgrXNoYnq@@YGPANMM@Z
?wIdupcpiyiTbU@@YGHE@Z
?hmmeqZp@@YGHNH@Z
?jyxwxxefvttgfp@@YGM_NI@Z
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 202KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ