X:\nata\third\third\release\third.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1a3ae8198cd91f4e8c783e1c9be8d153_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
1a3ae8198cd91f4e8c783e1c9be8d153_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
1a3ae8198cd91f4e8c783e1c9be8d153_JaffaCakes118
-
Size
645KB
-
MD5
1a3ae8198cd91f4e8c783e1c9be8d153
-
SHA1
3b362ed11730e4b08a6943726b1efb51ec651891
-
SHA256
21b57732a3ad05f6fd016725d55c6cd59fe733b30d4b04bc2719d14d29336d6b
-
SHA512
6eb87ea2ce264bdc8bbb8a790f0e88299853f5690f7aa9c354eb51049c721a939263ba84aed41162ded917fe0626b1fa8d8136a4797cee81f859a5e823a6f830
-
SSDEEP
12288:49vWzeRcl7cJhybXuQope9pLSz8nTK9Tq4Dg6WeUlXO/RyZ7:49qGydop21SYnTK9TSl+EZ7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a3ae8198cd91f4e8c783e1c9be8d153_JaffaCakes118
Files
-
1a3ae8198cd91f4e8c783e1c9be8d153_JaffaCakes118.exe windows:5 windows x86 arch:x86
d9fe6454b48e9374209dd65eb1b2f202
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
CreateFileA
SetStdHandle
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
FlushFileBuffers
HeapReAlloc
HeapSize
HeapAlloc
SetEndOfFile
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoA
IsValidCodePage
GetOEMCP
GetACP
GetStringTypeA
VirtualFree
HeapFree
HeapCreate
HeapDestroy
CreateThread
FreeEnvironmentStringsW
FreeEnvironmentStringsA
LocalFree
GetProcessHeap
CreateFileW
GetCommState
LocalLock
VirtualAlloc
OpenProcess
lstrcpyA
GlobalAlloc
GlobalFree
GetEnvironmentStrings
GetTempPathW
WideCharToMultiByte
GetFullPathNameW
GetLastError
FormatMessageW
GetUserDefaultLCID
WaitForSingleObject
GetCommandLineW
GetStdHandle
GetConsoleWindow
GetModuleFileNameA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetFilePointer
SetHandleCount
ReadFile
CloseHandle
GetModuleHandleA
LoadLibraryW
ExitProcess
OutputDebugStringW
GetFileType
OutputDebugStringA
WriteFile
DebugBreak
SetLastError
TlsFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
GetModuleHandleW
TlsGetValue
GetProcAddress
lstrlenW
GetEnvironmentStringsW
WriteConsoleW
GetStringTypeW
LCMapStringW
LCMapStringA
IsBadReadPtr
HeapValidate
GetCPInfo
GetStartupInfoA
GetCommandLineA
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
InterlockedCompareExchange
InterlockedExchange
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
RtlUnwind
user32
GetWindowTextLengthA
GetSystemMetrics
GetWindowTextA
PostMessageA
InvalidateRect
GetWindowDC
GetDesktopWindow
GetAncestor
GetSubMenu
RemovePropA
BeginPaint
GetParent
ExitWindowsEx
GetClassInfoExW
UpdateWindow
EnumWindows
SetLayeredWindowAttributes
EndDialog
EndPaint
GetDC
ReleaseDC
GetWindowRect
GetDlgItem
SendMessageA
CopyImage
SetScrollRange
SetScrollPos
ScrollWindowEx
GetWindowWord
TrackPopupMenu
GetMenu
CheckMenuRadioItem
IsClipboardFormatAvailable
EnableMenuItem
LoadCursorA
SetWindowPos
SendDlgItemMessageA
gdi32
GetOutlineTextMetricsW
SelectPalette
CombineRgn
RealizePalette
CreateRectRgn
CreateFontW
AddFontResourceExW
Ellipse
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
DeleteDC
DeleteObject
GetObjectA
CreateFontIndirectA
GetDeviceCaps
SetViewportOrgEx
SelectClipRgn
GetStockObject
SelectObject
advapi32
GetTokenInformation
OpenProcessToken
LookupAccountSidA
shell32
SHBrowseForFolderA
ExtractAssociatedIconA
DragQueryFileA
ole32
CreateClassMoniker
CreateStreamOnHGlobal
CoInitializeEx
CoCreateInstance
CoUninitialize
oleaut32
OleLoadPicture
ws2_32
closesocket
getprotobynumber
getservbyname
getservbyport
WSACloseEvent
msacm32
acmDriverClose
msimg32
AlphaBlend
GradientFill
TransparentBlt
winmm
mmioAscend
shlwapi
ColorRGBToHLS
comctl32
CreateToolbarEx
ImageList_GetIconSize
gdiplus
GdipLoadImageFromFileICM
GdipCloneImage
GdipDisposeImage
GdipFree
GdipAlloc
GdipLoadImageFromFile
uxtheme
SetThemeAppProperties
Exports
Exports
Type
Sections
.text Size: 290KB - Virtual size: 289KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 246KB - Virtual size: 245KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ