R:\qaduijujoI\zienxfaJszXx\rniyebb\EgKYIdCqx\zgjyyRmuholri.pdb
Static task
static1
Behavioral task
behavioral1
Sample
047fc697a672d67759441289b971d360_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
047fc697a672d67759441289b971d360_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
047fc697a672d67759441289b971d360_JaffaCakes118
-
Size
191KB
-
MD5
047fc697a672d67759441289b971d360
-
SHA1
4897b22695fa1c01c233b2b96a9a0e3c030334e3
-
SHA256
d72f96c0b59ffdc0e3d734c885c1a7cf8bfc9d3415d6f4580a9f49eab66408c1
-
SHA512
ecdd54a985795bf6c8bd03794dedd47a05e076cb5496172e3ec27e6873d65c4336f138b96aa130c481da86e203b8e6e7298ebef41ea4a6afcce711eabcc0a345
-
SSDEEP
3072:CMq51vSpYwQbt2LsbVBHBenH0VkBc236dF0nrIm+qlCWhWdL4cj1eIK6SygK:mUYZt9bjHBQ/Bc23W2I0fWl49IKH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 047fc697a672d67759441289b971d360_JaffaCakes118
Files
-
047fc697a672d67759441289b971d360_JaffaCakes118.exe windows:5 windows x86 arch:x86
8cfdb28b1c2d02c16a395a6854b7b507
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
PathIsUNCW
comdlg32
PageSetupDlgW
ChooseColorW
GetOpenFileNameW
ChooseFontW
PrintDlgExW
kernel32
FreeResource
IsBadWritePtr
CreateMutexA
PulseEvent
IsValidLanguageGroup
GetStdHandle
RaiseException
GetComputerNameA
GetFileAttributesExW
WaitForSingleObject
GetComputerNameW
IsBadStringPtrW
SetCommMask
GetLocaleInfoA
SetSystemTimeAdjustment
GetOverlappedResult
SetErrorMode
GetThreadTimes
TlsGetValue
LocalLock
lstrcpyW
GetTempFileNameA
CopyFileA
GetSystemDefaultUILanguage
SystemTimeToFileTime
WaitForMultipleObjects
lstrcpyA
LockFile
FileTimeToDosDateTime
GlobalLock
GetUserDefaultLCID
LocalSize
GetModuleFileNameA
lstrcatA
GetTimeZoneInformation
SetUnhandledExceptionFilter
TlsSetValue
GetLocaleInfoW
LocalReAlloc
CreateEventA
FlushFileBuffers
FindFirstChangeNotificationW
TerminateThread
FindCloseChangeNotification
SetFileApisToOEM
CreateFileW
GetWindowsDirectoryA
GetTickCount
SetCurrentDirectoryA
GlobalAddAtomA
DuplicateHandle
SetFilePointer
user32
ShowWindow
ChildWindowFromPointEx
FillRect
SystemParametersInfoW
RemoveMenu
CharUpperBuffW
GetUserObjectInformationA
IsCharLowerA
GetMessageA
SetRectEmpty
CreateDialogParamA
GetScrollRange
SendDlgItemMessageW
MapVirtualKeyA
DrawFocusRect
GetDlgCtrlID
SetWindowTextA
AdjustWindowRect
MessageBoxW
ScreenToClient
CharNextW
GetWindowDC
IsWindow
GetWindowTextA
InvalidateRect
MapDialogRect
DialogBoxParamA
GetMenuItemRect
GetScrollInfo
SetMenuItemInfoW
GetKeyNameTextW
CascadeWindows
SwitchToThisWindow
SendNotifyMessageW
RegisterWindowMessageW
IsDlgButtonChecked
ClientToScreen
DefWindowProcA
SetScrollRange
GetMessageTime
DialogBoxIndirectParamA
SetWindowLongA
TileWindows
EnableWindow
RegisterClassExW
GetSysColorBrush
LoadMenuA
GetMenuItemID
DrawFrameControl
CallWindowProcA
EndDialog
PostMessageA
OpenIcon
DrawAnimatedRects
OffsetRect
InvalidateRgn
GetFocus
IsDialogMessageW
GetKeyboardLayoutList
GetWindowLongA
AdjustWindowRectEx
GetClipCursor
ValidateRect
ShowCaret
SetForegroundWindow
CheckMenuRadioItem
CreateAcceleratorTableW
IsZoomed
DestroyCursor
SetSysColors
DefDlgProcW
GetWindowPlacement
OpenDesktopW
CharLowerW
ShowScrollBar
IsWindowUnicode
ExitWindowsEx
LoadBitmapA
AllowSetForegroundWindow
HiliteMenuItem
DrawTextA
SetWindowRgn
GetMenuStringW
GetMonitorInfoW
GetClientRect
GetDlgItemInt
DispatchMessageW
AttachThreadInput
CreatePopupMenu
ModifyMenuW
SendMessageA
SendMessageTimeoutW
SetWindowTextW
SetDlgItemInt
IsWindowVisible
CharUpperA
DefDlgProcA
InflateRect
GetClassInfoA
ArrangeIconicWindows
RegisterClassExA
MessageBoxA
CheckDlgButton
OemToCharBuffA
GrayStringW
CharNextA
GetParent
CreateCursor
GetClassInfoExW
EnableMenuItem
SetMenu
GetClassInfoExA
IsCharAlphaA
PostMessageW
GetMenu
AppendMenuW
SetMenuDefaultItem
CheckRadioButton
SetRect
msvcrt
mbstowcs
memset
wcscmp
wcscoll
malloc
ftell
towlower
_controlfp
strncpy
__set_app_type
clearerr
wcslen
__p__fmode
putc
__p__commode
sscanf
strpbrk
swscanf
wcstol
strchr
strcpy
fputc
_amsg_exit
localtime
_initterm
wcstombs
isdigit
ungetc
_ismbblead
clock
_XcptFilter
wcscat
remove
fread
strstr
atoi
wcspbrk
iswctype
_exit
fwrite
wcsrchr
_cexit
vswprintf
wcsstr
printf
__setusermatherr
putchar
__getmainargs
comctl32
ImageList_Write
ImageList_Destroy
ImageList_GetIconSize
ImageList_LoadImageW
PropertySheetA
ImageList_Read
Exports
Exports
?CalculateStringCapacity@@YGKDDPAX:O
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.dati Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.date Size: 512B - Virtual size: 99B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.char Size: 512B - Virtual size: 324B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.odata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.align Size: - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ