Q:\krlr\xtckhhz\zjOkEx.pdb
Static task
static1
Behavioral task
behavioral1
Sample
28c39b9832e0d4a45de912a377c4dfd3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
28c39b9832e0d4a45de912a377c4dfd3_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
28c39b9832e0d4a45de912a377c4dfd3_JaffaCakes118
-
Size
126KB
-
MD5
28c39b9832e0d4a45de912a377c4dfd3
-
SHA1
02ef85ef3f85c9e8f544fc3242fc1dd86afa9653
-
SHA256
fc75a97c2395760c24828554795a76c747f3a62318c7f23f4e36c1e5b2dbb8d8
-
SHA512
c1ac79d3af0e1cea2b9931c28f127fbb48b26b62c28d5f204b48f6b2e4586f94120a063d017d51d274e8ed3ac1146831cf0c14d0ce6737b8e5e6f75af6b43ba4
-
SSDEEP
3072:SS6O5EFGqDS4ym9OQK15IPn6CXK4/qT48:dqFGqLyMFaCnj66h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28c39b9832e0d4a45de912a377c4dfd3_JaffaCakes118
Files
-
28c39b9832e0d4a45de912a377c4dfd3_JaffaCakes118.exe windows:5 windows x86 arch:x86
db30d002341eaf7770f73e2d651f8ff6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
PropertySheetW
ImageList_GetImageCount
kernel32
DefineDosDeviceW
OpenSemaphoreW
lstrlenW
GetCurrentThread
GetComputerNameA
SearchPathW
FreeLibrary
CreateMutexA
EnumSystemLocalesA
SetFileAttributesA
DeleteAtom
SetStdHandle
GlobalLock
GetThreadPriority
shlwapi
StrCatBuffW
PathGetArgsW
user32
OpenDesktopW
LoadCursorW
LockWindowUpdate
SetScrollPos
LoadStringA
DestroyCursor
GetWindowRect
RegisterWindowMessageW
GetScrollPos
GetMenuInfo
wsprintfW
FindWindowW
EnableMenuItem
SendMessageW
gdi32
SetRectRgn
RestoreDC
SetLayout
RectVisible
CreatePatternBrush
Escape
CreateDIBitmap
Exports
Exports
?OzkvcuoWuDj@@YGIPAN@Z
?etgEkawJpMyBjtybRbynzm@@YGNKD@Z
?awqsakwaGuceTukw@@YGJPAIPAD@Z
?izwJtRcXmzvhkxosMd@@YGEM@Z
?Zbtubzf@@YGEPADF@Z
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ