X:\gzdgby\jXtLSnr\kEHa\lNbwUv.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3b3a95ca57a8cb48225d6db2aef25dab_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3b3a95ca57a8cb48225d6db2aef25dab_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3b3a95ca57a8cb48225d6db2aef25dab_JaffaCakes118
-
Size
123KB
-
MD5
3b3a95ca57a8cb48225d6db2aef25dab
-
SHA1
1eb0f06f159cd82647d5a8d3bddaaf1b209b528a
-
SHA256
a5ab741e580e3984fd7607ea78aa158f89b50cd44b97c7596f1791cc7d572e15
-
SHA512
5153b703cc8daf62b3aa246626df230fe8632ebc116b96653cd328cd64a08398b8a076cd5914313653649e75dae166af1b0e8924c8a618769e40b2b39f4afc15
-
SSDEEP
3072:sasSrT7UofkMbDi31Y1VYa0/RXYoHE1fK4w:/sgTwOkMbDiFY1VYDnHE1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b3a95ca57a8cb48225d6db2aef25dab_JaffaCakes118
Files
-
3b3a95ca57a8cb48225d6db2aef25dab_JaffaCakes118.exe windows:5 windows x86 arch:x86
cb8885eb8cb511ca49099ea086f70d55
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
IsBadReadPtr
GetComputerNameExA
LockResource
CreateFileMappingA
LoadLibraryA
GetLocaleInfoA
UnlockFile
FreeResource
GetHandleInformation
SetCommBreak
lstrlenA
GlobalAlloc
LocalReAlloc
SetMailslotInfo
user32
GetDC
LoadAcceleratorsW
GetWindowTextLengthW
SetCursorPos
SetClassLongW
GetWindowTextLengthA
LoadMenuW
GrayStringW
DrawTextW
GetClassNameW
wsprintfW
SendMessageTimeoutW
MessageBoxExW
shlwapi
StrCmpNIA
gdi32
ScaleWindowExtEx
ExtTextOutA
PathToRegion
GetTextCharsetInfo
SetTextAlign
BitBlt
CreateFontIndirectA
Exports
Exports
?OkLzqRgquBspkjl@@YGXPAHPAK@Z
?pooGbuGSJych@@YGIPAK@Z
?zfzqebHcXmYbgvqeyaaq@@YGPAXJ@Z
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ