Z:\aBrxik\MglyRm\lcuofe\madmEZgY\AeviXuz.pdb
Static task
static1
Behavioral task
behavioral1
Sample
27472353f0dfb1f9c049d6c26ddec35d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
27472353f0dfb1f9c049d6c26ddec35d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
27472353f0dfb1f9c049d6c26ddec35d_JaffaCakes118
-
Size
181KB
-
MD5
27472353f0dfb1f9c049d6c26ddec35d
-
SHA1
a22f451b322af64cfea745dea91b27565fa27e64
-
SHA256
ab719525fe5087018e4d3a2cc8f9e551c54a48642810cc7b67824717fc5599a2
-
SHA512
630b4447361e5617c3d13482c21dc3c7aeb335cebc8f933de00ec0848246c9fdd278cb6698a18817a8dabf5ff82acf18020effdfae5c0347601c327750937148
-
SSDEEP
3072:hEGJVr8J92AXGFkWUF5VBJUL+OFTmnDr9BU01iBrta8PKJ6+2G6PbyX:5Tr8L2AWOz5VBilF8TOBx1SJt2G6PuX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27472353f0dfb1f9c049d6c26ddec35d_JaffaCakes118
Files
-
27472353f0dfb1f9c049d6c26ddec35d_JaffaCakes118.exe windows:5 windows x86 arch:x86
fceb1e324e37422f8c62ddb8be7e0f9d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
LoadIconW
SetParent
CreateIconFromResource
CallWindowProcA
GetWindow
GetWindowLongW
SetRectEmpty
GetScrollPos
DrawEdge
GetLastActivePopup
MapVirtualKeyExW
gdi32
TranslateCharsetInfo
GetObjectW
SetMapMode
GetTextExtentPointW
CreateDiscardableBitmap
CreateFontIndirectA
GetTextCharsetInfo
kernel32
FormatMessageW
EnumResourceTypesA
SetUnhandledExceptionFilter
lstrcmpiA
SetEndOfFile
GetModuleHandleW
CreatePipe
FindResourceW
lstrlenW
GetProcAddress
GetWindowsDirectoryA
GetFileAttributesA
FileTimeToSystemTime
ntdll
_aullrem
Exports
Exports
?PQZnXrOdgn@@YGPAXJJ@Z
?aaqDfejhlYcegcjpvq@@YGXJ@Z
?dbtLEMujlDV@@YGPAEPA_NI@Z
?RoXnLmaopgulwgnLlfwlt@@YGHPAI@Z
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ