F:\ppUzdaco\fKRqGprdxWbi\vjWlumKymka\xtumCpiHmcAI\hVivtxZ.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1842ff9eff19bb64e0fffd0ad5013bc3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
1842ff9eff19bb64e0fffd0ad5013bc3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1842ff9eff19bb64e0fffd0ad5013bc3_JaffaCakes118
-
Size
159KB
-
MD5
1842ff9eff19bb64e0fffd0ad5013bc3
-
SHA1
0d6224d9d8646403862a2107252e79adbdf65164
-
SHA256
774326ae94f6d05e3fa01c4564f81f050271da2d20e04c99356ab2b7f054bffb
-
SHA512
7c70800b4e0a59e88e27239fde83fdfc0552ee27d157c8324c4f5d6c62106726c19c5af001d750a259f0e9746e3f0c82d9360ada1bb2f526ac0ce86072018332
-
SSDEEP
3072:MFQPzPVA5dzL9QiRyrE6fbZ/pNxQiK8ysWztSeHvAuJUmhxslYbSqeOa3t:wQT65ciRygoZ/p7fHyFfpUMSWe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1842ff9eff19bb64e0fffd0ad5013bc3_JaffaCakes118
Files
-
1842ff9eff19bb64e0fffd0ad5013bc3_JaffaCakes118.exe windows:5 windows x86 arch:x86
cfaf18892c1e93ad80bca6ffbc1b5ad3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
ShowCaret
GetForegroundWindow
CallWindowProcA
GetMessageTime
UpdateWindow
FindWindowA
ShowOwnedPopups
GetKeyNameTextW
GetDialogBaseUnits
ReplyMessage
GetTopWindow
SetDlgItemTextW
GetNextDlgTabItem
GetDesktopWindow
CharLowerW
LoadMenuW
GetActiveWindow
kernel32
EnumResourceNamesA
GetLocaleInfoW
GetModuleHandleW
LocalUnlock
FindResourceExW
lstrcmpW
SetCurrentDirectoryA
GetCommTimeouts
Exports
Exports
?GetValidated
Sections
.text Size: 154KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vbf Size: 512B - Virtual size: 107B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iuy Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mjh Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ghj Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE