W:\drdgguArZrdQ\vdPQjywktJdl\kgbNdeinMlE.pdb
Static task
static1
Behavioral task
behavioral1
Sample
16c5c6b863d4303c64047a318d1e4190_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
16c5c6b863d4303c64047a318d1e4190_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
16c5c6b863d4303c64047a318d1e4190_JaffaCakes118
-
Size
176KB
-
MD5
16c5c6b863d4303c64047a318d1e4190
-
SHA1
e058e470e694739b94bc9af5ab5a3fea7aa2d59b
-
SHA256
d1d01b93961c7e254459ab51d7b857798be0dca0eb9ef85c7a5e46b96aebb248
-
SHA512
840f8f538dec8f19100f0b3fcd697733120ee89c9b7237e0fb3cec901d88e3125c0a2c9ea58c7b69731fd65fd5b8a5b842d0c9435b32bf99da07fcaae76d5cdf
-
SSDEEP
3072:9m2GAdKbzkqrHBS7hevTs6GwoImZ/4vg1W48XWFhKJffnn6qL7wNzdF8eJbb9Qy4:oAkkqbBS4Lp/K/H78WqnFENz7rNQyKRF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16c5c6b863d4303c64047a318d1e4190_JaffaCakes118
Files
-
16c5c6b863d4303c64047a318d1e4190_JaffaCakes118.exe windows:5 windows x86 arch:x86
082839249cb5db2296ca225d43ae0b6a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
IsWindow
GetActiveWindow
GetFocus
SetFocus
OffsetRect
IsWindowEnabled
GetWindowRect
ntdll
RtlCompareMemory
kernel32
GlobalGetAtomNameA
GetSystemTimeAdjustment
IsDBCSLeadByteEx
ConvertDefaultLocale
ExitThread
MoveFileExW
GetThreadContext
FindResourceExW
GetSystemDefaultLangID
GetShortPathNameW
VirtualProtect
CallNamedPipeW
gdi32
SetDIBColorTable
SetAbortProc
AddFontResourceW
SetBkColor
TextOutA
GetClipBox
CreateICW
GetWindowOrgEx
CreateCompatibleBitmap
DeleteObject
CreateDCW
Exports
Exports
?InsertFil
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fxc Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fx Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ