U:\rLzeVW\ivlR\adjskMHz.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1697e9fb8be15c76b8fe847f59b4326b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1697e9fb8be15c76b8fe847f59b4326b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1697e9fb8be15c76b8fe847f59b4326b_JaffaCakes118
-
Size
99KB
-
MD5
1697e9fb8be15c76b8fe847f59b4326b
-
SHA1
148b0c58fb83b25b3b3ac87c515c3483a41ebcbe
-
SHA256
9fc5aee899ae184de6d791f1ecfa7639cac0d8bef3190f237991336c274a614d
-
SHA512
3cf2c193d644ce0330014710bc6c7117a0aedd1a04a0090dadc2be7de22092fdbfe0e820ab92f54b5c70df2baf6003fd232005513372418aae58bd50edf31762
-
SSDEEP
1536:Z3IYD2BOLrdDJSEweutoDnZZQRUc/i9lcdZW4ipx7EG9WRXjOdljSAb:Z3Is62Jgeuq1SR5/i9lcdMR7I95jf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1697e9fb8be15c76b8fe847f59b4326b_JaffaCakes118
Files
-
1697e9fb8be15c76b8fe847f59b4326b_JaffaCakes118.exe windows:5 windows x86 arch:x86
1d9e1afb313ca760a61bd2d3ed782637
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
DestroyPropertySheetPage
CreateStatusWindowW
ImageList_Remove
kernel32
GetThreadLocale
FormatMessageA
CopyFileW
DeleteAtom
GetLongPathNameW
GetTickCount
LoadLibraryA
lstrcmpiA
SetCommTimeouts
GetCommModemStatus
ReleaseSemaphore
OpenFileMappingW
SuspendThread
user32
SendInput
DispatchMessageA
GetDoubleClickTime
PostThreadMessageA
ChildWindowFromPointEx
SetWindowTextA
SystemParametersInfoA
SetWindowTextW
GetMenuStringW
wsprintfW
SendNotifyMessageW
BeginDeferWindowPos
gdi32
GetTextCharsetInfo
GetClipBox
GetTextMetricsW
WidenPath
GetTextExtentPoint32W
CreateDIBSection
TranslateCharsetInfo
CreateCompatibleDC
comdlg32
ReplaceTextW
GetOpenFileNameW
Exports
Exports
?biijwXMejIwwQg@@YGPAKFI@Z
?lyzwpgqYbnybqkMHbnhfZ@@YGIPAH@Z
?prPikBpxptuvKokz@@YGHKPAD@Z
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xdata Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ