V:\uvpZme\wgkfcEkj\qEQfv\nrlaMVsf.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2bf47127e4ec7a86a7a708f37ce8c2f2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2bf47127e4ec7a86a7a708f37ce8c2f2_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2bf47127e4ec7a86a7a708f37ce8c2f2_JaffaCakes118
-
Size
199KB
-
MD5
2bf47127e4ec7a86a7a708f37ce8c2f2
-
SHA1
676a4c4d34d13416cad6aa0251a2d91b53511613
-
SHA256
e959f1626b98c24c2dd39bf60750d161a22d967b6ce386206c7df8100375bec9
-
SHA512
cf4addecfd731bde385e593c874ae21fb37b7f2e94d74ddfb2e3db8982253a838ffb6fdbde7d25d78a6e4f186efac2b5a2a6975d2c6e48e4ca56ccb859f5983c
-
SSDEEP
3072:Z+Ypk7wkZCTKx3Ls+9q9VExaKwH89JgawQqTaF+GPehiRYWq02YFZP/5Yf0:Z+X3LFqDbKwc9GpaYwqSfBY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bf47127e4ec7a86a7a708f37ce8c2f2_JaffaCakes118
Files
-
2bf47127e4ec7a86a7a708f37ce8c2f2_JaffaCakes118.exe windows:5 windows x86 arch:x86
a9e98ee616cf476bcc686c5b56241ea8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
GetDialogBaseUnits
RedrawWindow
GetCaretBlinkTime
GetAsyncKeyState
VkKeyScanExA
MapVirtualKeyExA
MapDialogRect
GetForegroundWindow
ClipCursor
CharLowerW
GetKBCodePage
DrawFrameControl
SetWindowTextA
ChildWindowFromPoint
gdi32
PtVisible
EndPage
GetDeviceCaps
RectInRegion
CreateBrushIndirect
ExtFloodFill
DPtoLP
SetViewportExtEx
shlwapi
ChrCmpIW
PathRemoveArgsW
kernel32
CreateMailslotW
DeviceIoControl
GetComputerNameExW
GetFullPathNameW
GetOEMCP
FlushViewOfFile
LoadLibraryExA
OpenMutexW
WaitForSingleObjectEx
LocalLock
WriteFile
GetSystemWindowsDirectoryW
Exports
Exports
?DhGOrnzutpfimhqsGvt@@YGXMG@Z
?vStBzskarroyrrqniqqys@@YGPAIEPAM@Z
?hyfIwkv@@YGDFM@Z
?kjxomhKqtcojwbQ@@YGXH@Z
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 154KB - Virtual size: 238KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ