N:\zXdMhy\jIHxAfdx\yWprvgQ\zlMC.pdb
Static task
static1
Behavioral task
behavioral1
Sample
53c60bb111005d014c48f95af93c7bf9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
53c60bb111005d014c48f95af93c7bf9_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
53c60bb111005d014c48f95af93c7bf9_JaffaCakes118
-
Size
157KB
-
MD5
53c60bb111005d014c48f95af93c7bf9
-
SHA1
f065236df77de45f87702b622ec0a69eef2be3db
-
SHA256
9ec0a15f7d71ac527d1c5fd0c27c704a94ca68e4fd8ae7d983d9ddfbb4b268a5
-
SHA512
106d21961588ab39f79a3ded21109b75789eee0b7e279432966b7469be6f1cb731e2507840ccabdad88a54fbea7933116eefafe0c13b62dc21fa01c228f1aef0
-
SSDEEP
3072:h7dRczDWwVwZZkF9jhegkr5Rd36jBREuB0hQ/9GKPS95w:h7SWJi94BgM68ou
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53c60bb111005d014c48f95af93c7bf9_JaffaCakes118
Files
-
53c60bb111005d014c48f95af93c7bf9_JaffaCakes118.exe windows:5 windows x86 arch:x86
eed47b014aad588ae23c9945b598a22a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
SetDIBits
SetPixel
SetStretchBltMode
GetTextExtentPointW
GetCharWidth32W
PathToRegion
ResizePalette
RemoveFontResourceW
kernel32
LoadResource
FileTimeToSystemTime
MoveFileA
FindResourceA
VirtualQuery
lstrlenW
GetFileSize
GetFileAttributesA
CancelIo
OpenSemaphoreW
IsBadStringPtrW
SetHandleInformation
shlwapi
StrCatBuffW
StrCmpW
user32
CreateIconFromResource
GetKeyboardLayoutList
GetDlgItemInt
TranslateAcceleratorA
GetMonitorInfoW
wsprintfW
EnumThreadWindows
SetWindowTextA
CharToOemBuffA
RedrawWindow
GetWindowTextLengthW
GetMenuItemRect
comdlg32
CommDlgExtendedError
PageSetupDlgW
Exports
Exports
?oHqhjxqhquZqzPgdzioms@@YGGPAF@Z
?mpnzwEttncbFmk@@YGXPAHN@Z
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 317KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1024B - Virtual size: 649B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ