K:\cDyc\erootn\zniasluO\lmjUekP.pdb
Static task
static1
Behavioral task
behavioral1
Sample
41b7be064a440897a39e211ba6e0fa26_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
41b7be064a440897a39e211ba6e0fa26_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
41b7be064a440897a39e211ba6e0fa26_JaffaCakes118
-
Size
111KB
-
MD5
41b7be064a440897a39e211ba6e0fa26
-
SHA1
e003889f8d75446df36170ce6efb711212103f1b
-
SHA256
714695c28d10d9af959cc1b582b3d7cb1537397f550040e6d13470c0ac750e36
-
SHA512
1ddce038ac6b65cabcea783e8b344df03fe7660ef7ff9f834e5018831213f66527f21eccde570a6497f55c7f15635179bd1f0208a35529d8dbfe6933fba027c0
-
SSDEEP
3072:d/mZb3tBPWWioPhp+ZLPXff3woQojNTlHZLacJ7QhOjPC:xmZbDWHoPheQojP1kOjP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41b7be064a440897a39e211ba6e0fa26_JaffaCakes118
Files
-
41b7be064a440897a39e211ba6e0fa26_JaffaCakes118.exe windows:5 windows x86 arch:x86
9824290711eb615e9147cc376bfc63b0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
StrCatBuffW
StrCmpW
comdlg32
PrintDlgW
ReplaceTextW
GetOpenFileNameA
GetSaveFileNameA
user32
GetScrollInfo
SetScrollPos
MonitorFromRect
GetLastActivePopup
GetCaretBlinkTime
ChangeMenuW
AdjustWindowRect
GetUpdateRgn
GetForegroundWindow
SetWindowLongA
wsprintfW
TrackPopupMenuEx
GetMenuDefaultItem
DrawAnimatedRects
KillTimer
FindWindowW
gdi32
BitBlt
OffsetViewportOrgEx
GetTextExtentPoint32W
GetBkMode
SelectObject
GetNearestPaletteIndex
SetRectRgn
GetTextExtentPointA
kernel32
HeapReAlloc
GetVersion
lstrlenA
GetVersionExA
GetCommConfig
CancelIo
GetTimeFormatA
SetHandleInformation
WinExec
lstrlenW
GetStringTypeExW
MulDiv
CallNamedPipeW
Exports
Exports
?qmhmxuu@@YGPAKHN@Z
?brEipicqbixYkJEl@@YGPAXPAI@Z
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ