K:\favC\xiBbTh\jmLjx.pdb
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_d045f8b1c180eb6a5ed7649412870d3a.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_d045f8b1c180eb6a5ed7649412870d3a.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_d045f8b1c180eb6a5ed7649412870d3a
-
Size
132KB
-
MD5
d045f8b1c180eb6a5ed7649412870d3a
-
SHA1
676d5fac152feea00a7bc5680f6df20d0abbfcf6
-
SHA256
105e589ca9105d157ef06c860c0b11dc56b0f3e138c2123b804bfe400e70a1e9
-
SHA512
31512d5347555af2abd4426c9d82982172637e7849f82ec59ffaa49c604566f87c6c3d81f93cae8fea06efb4171c08aecec90ebc55e142b6b375e72c4f86bb6e
-
SSDEEP
3072:xacOO5PDVkRsmDdqlbxmk9BVi4itizWhWWFrxsl:xacOEDHRxmWbi4UizQWWz4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_d045f8b1c180eb6a5ed7649412870d3a
Files
-
JaffaCakes118_d045f8b1c180eb6a5ed7649412870d3a.exe windows:5 windows x86 arch:x86
7503d99f5bc47c301c0855fad71485fb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
SetMailslotInfo
EnterCriticalSection
CreateRemoteThread
SuspendThread
TransactNamedPipe
lstrlenW
GetThreadLocale
GetModuleHandleA
TerminateThread
WaitForSingleObject
CopyFileA
IsValidLocale
shlwapi
StrCatBuffW
comdlg32
PrintDlgW
ChooseFontW
GetFileTitleW
user32
GetSystemMetrics
TabbedTextOutW
GetMenuItemRect
PeekMessageA
GetUserObjectInformationW
GetWindowTextLengthW
GetKeyState
wsprintfW
RegisterClassExW
SetTimer
SystemParametersInfoW
CopyRect
SetWindowTextA
DefWindowProcA
gdi32
PolyBezier
StretchDIBits
SetDIBits
Escape
PtInRegion
DPtoLP
Rectangle
StartDocW
GetCurrentObject
Exports
Exports
?wekngapeWgRt@@YGDPANPAD@Z
?sGaLrttrvBhnkcFMrpFqig@@YGPAXPAIG@Z
?fYShEgogperONwHqucar@@YGIF@Z
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1024B - Virtual size: 693B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ