F:\irxfJTjp\tacKjoFB\dAduWEn.pdb
Static task
static1
Behavioral task
behavioral1
Sample
550bb6c24f2d493c6d1650035698459a_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
550bb6c24f2d493c6d1650035698459a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
550bb6c24f2d493c6d1650035698459a_JaffaCakes118
-
Size
112KB
-
MD5
550bb6c24f2d493c6d1650035698459a
-
SHA1
209cfe7fa5bb3c5e442de9dff70c8f6428d1a9e3
-
SHA256
9a9e1e00e357f27abb5bd1c0393fd961f227ec91fb63d8b6e242d9657dcb9173
-
SHA512
caa86cadaaffd021baf66edfc29aa48093fed87b32775b9e6dfaa7568cbc61ecc47adfe0eaa23a558c411d59da2148b6b279ff6bb5d1f1fd878e2cefd4b0295b
-
SSDEEP
3072:5xeT6OxVaZG0Yd0RvWJiea0yn08/l8nQfS9z:5sVaZcdLa08/l8QfW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 550bb6c24f2d493c6d1650035698459a_JaffaCakes118
Files
-
550bb6c24f2d493c6d1650035698459a_JaffaCakes118.exe windows:5 windows x86 arch:x86
bf7cda0260923847c8540f4b736b45c7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
DialogBoxParamA
GetPropW
GetIconInfo
GetMenuCheckMarkDimensions
PostThreadMessageW
RegisterClassA
DefDlgProcA
CreateDialogIndirectParamW
GetMenuItemID
ShowScrollBar
EnumChildWindows
GetWindowLongW
LoadCursorW
CheckMenuItem
gdi32
SetLayout
GetTextExtentPointA
CreatePalette
RectInRegion
GetTextExtentPointW
Polygon
GetTextFaceW
CreateCompatibleBitmap
CreateBitmap
kernel32
GetProcAddress
SetCurrentDirectoryA
SetCurrentDirectoryW
HeapValidate
lstrcatW
GetComputerNameExW
CreateDirectoryA
LoadLibraryW
IsBadCodePtr
DeviceIoControl
FlushViewOfFile
lstrcmpiW
LocalLock
Exports
Exports
?qvlkGliuew@@YGXDPAK@Z
?EMbjjJXPkeXbHxXtpsgtTg@@YGGPADF@Z
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.temp Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 135B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ