T:\YqKqNEp\cmlrtXCbq\qkwozcmBsUa\twolmTgxhs.pdb
Static task
static1
Behavioral task
behavioral1
Sample
15e9bf726a76c556be3b892ca33bf771_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
15e9bf726a76c556be3b892ca33bf771_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
15e9bf726a76c556be3b892ca33bf771_JaffaCakes118
-
Size
183KB
-
MD5
15e9bf726a76c556be3b892ca33bf771
-
SHA1
0b79d362c529a8e8b7d6265f1b93d5c19d69de94
-
SHA256
be241c5e7455a8a2188612df2853a1dba4aefdb7ae9eef90b9428457f573299f
-
SHA512
2b5310b9693ba6c5703587f4e578e2aa8a9fe337dd6f88b3b5ec54640eb7c8a117fcc5cff337997fe4550aa2486666db47783a3e9c4541def0c78906912f73d0
-
SSDEEP
3072:oJZyw9B3CEq8uh4l92ymS/TPJ/tib+FreWNOcLyBXFHXT:oJQG3CJ4lgyP7Jk8eWNmBRXT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15e9bf726a76c556be3b892ca33bf771_JaffaCakes118
Files
-
15e9bf726a76c556be3b892ca33bf771_JaffaCakes118.exe windows:5 windows x86 arch:x86
641657965d16349a4106c48a7b820d6a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
GetPixel
ResizePalette
CreateFontW
EndDoc
kernel32
GetTempPathA
CreateMutexA
HeapWalk
GetPrivateProfileIntA
GetTempPathW
GetUserDefaultLCID
lstrlenW
shlwapi
PathUnquoteSpacesW
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
user32
MessageBoxW
Exports
Exports
?CanRunThread@@YGKXZ
Sections
.itext Size: - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE