V:\pGin\jSjhwNk\Fifggzu\cplmcbuc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1478310a3574c4e29001ee374348b577_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1478310a3574c4e29001ee374348b577_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1478310a3574c4e29001ee374348b577_JaffaCakes118
-
Size
183KB
-
MD5
1478310a3574c4e29001ee374348b577
-
SHA1
74d33d64a918d9ebb9922a57bddddf60d0dfabc9
-
SHA256
33fb0d3c92f7f09442f3f5f3536b82a0fd10e7f7f908252cd01a975edb5393df
-
SHA512
05036cfaba1733cfbd264682b7eec145c02543770ad52b87f2855a94036b3c2284fbc916d3899e1e6f49725e62d72cbc73967c1afcbdcfc7871a91e412fa1294
-
SSDEEP
3072:UEunGYh0yH+Fj4u9dPA/7zE0plVaOklif7OBUDMctB1/i95g2c4t:UB1+d4qCkOZzOBtKkck
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1478310a3574c4e29001ee374348b577_JaffaCakes118
Files
-
1478310a3574c4e29001ee374348b577_JaffaCakes118.exe windows:5 windows x86 arch:x86
dbc77c9e099e0363bb689fd3eb58978c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
ImageList_Destroy
ImageList_Draw
CreateStatusWindowW
comdlg32
ReplaceTextW
GetOpenFileNameW
PrintDlgW
kernel32
GetThreadContext
TryEnterCriticalSection
lstrcmpiW
GetModuleFileNameA
GetWindowsDirectoryA
LoadLibraryW
CreateThread
SuspendThread
IsDBCSLeadByte
CreateNamedPipeW
GetSystemDirectoryA
GetProcAddress
gdi32
StartPage
GetTextExtentPoint32W
CreateFontIndirectW
SetViewportExtEx
OffsetViewportOrgEx
EnumFontFamiliesExW
GetSystemPaletteUse
SetROP2
SelectClipRgn
user32
GetWindow
GetScrollPos
IsCharLowerA
IntersectRect
RegisterHotKey
SetDlgItemTextW
DrawFrameControl
ScrollWindowEx
PostThreadMessageW
SetCursorPos
CallWindowProcA
GetWindowLongA
Exports
Exports
?qyygmXoiwglxpgGffhr@@YGM_NK@Z
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 1024B - Virtual size: 610B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 146KB - Virtual size: 222KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ