G:\JkjwaefmFxkWo\chyrHgYAswpff\qGpnokAxcdcVyo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
04b34412774e8844e376681326fd4f44_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
04b34412774e8844e376681326fd4f44_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
04b34412774e8844e376681326fd4f44_JaffaCakes118
-
Size
52KB
-
MD5
04b34412774e8844e376681326fd4f44
-
SHA1
e9fdbef16c7db5de3562a804b7bdb4f293e64414
-
SHA256
ae5dfc7ca177e8b67617d5d4b95a75c056c988c75c55703e918359d985b54aeb
-
SHA512
01d28c587acdf499098f70006d909330ac5b76fbf64cdade3a30d2a6e95c2df6308dc33caa9e79bfe1486a56b8e5c4be694c4c949c39fbb118ae3d4ae2d14d2d
-
SSDEEP
768:w6q2VdyyauFgEKvUVmdtN2RBovhmTUbTQb4Ik/KdlTFDCTTTUVBMmKWS+7NpSW:w9yaggEK3ZhmgPQSE6TYVBS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04b34412774e8844e376681326fd4f44_JaffaCakes118
Files
-
04b34412774e8844e376681326fd4f44_JaffaCakes118.exe windows:5 windows x86 arch:x86
70654e847ab6832b665a9d0faa00ef1f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
UrlGetPartW
user32
DragObject
RegisterClassW
IsCharAlphaW
GetWindow
IsCharAlphaNumericW
GrayStringW
ShowScrollBar
SetMenuItemInfoW
IsWindowUnicode
ChangeMenuW
WaitMessage
CharUpperA
GetWindowTextW
CreatePopupMenu
GetMenuStringA
TranslateAcceleratorA
GetScrollRange
DialogBoxIndirectParamA
GetUserObjectInformationA
CharUpperW
FrameRect
BeginDeferWindowPos
GetClassLongA
AllowSetForegroundWindow
EqualRect
GetDlgItemTextA
GetFocus
GetSysColor
MessageBoxW
SetParent
GetKeyState
GetDlgItemInt
SendInput
AdjustWindowRect
ReplyMessage
OffsetRect
DefFrameProcA
CreateWindowExW
CreateIconIndirect
DispatchMessageA
AppendMenuW
TranslateAcceleratorW
RegisterClassA
GetMessageExtraInfo
DeferWindowPos
DrawStateA
HideCaret
SendDlgItemMessageW
FindWindowA
GetDoubleClickTime
RegisterWindowMessageW
wsprintfA
GetKeyNameTextW
CreateCaret
GetNextDlgGroupItem
LoadStringW
MessageBoxExA
InsertMenuA
DefFrameProcW
GetClipCursor
BringWindowToTop
GetDlgCtrlID
IsCharAlphaA
InsertMenuItemW
GetSystemMetrics
GetUpdateRgn
GetClassInfoExA
SetMenuItemBitmaps
mouse_event
MapVirtualKeyExW
InSendMessageEx
MonitorFromPoint
BeginPaint
CheckRadioButton
CharToOemA
CreateMenu
IsDialogMessageW
GetDC
CascadeWindows
DrawTextA
IsWindowEnabled
GetMenuCheckMarkDimensions
DefDlgProcW
GetDCEx
CharNextA
IsWindowVisible
CharLowerA
LoadIconW
OpenInputDesktop
ClipCursor
DrawIcon
GetWindowTextA
IsChild
SetMenuDefaultItem
CharLowerW
DrawIconEx
CopyImage
ToUnicodeEx
GetWindowTextLengthW
IsIconic
DestroyMenu
wsprintfW
SetWindowTextA
EndPaint
SetSysColors
LoadMenuW
IsMenu
PostMessageA
IsCharUpperA
GetIconInfo
CharLowerBuffW
SendNotifyMessageW
GetWindowLongA
SetScrollInfo
InternalGetWindowText
wvsprintfA
CallWindowProcA
SetWindowPos
SetMenu
RegisterHotKey
GetNextDlgTabItem
DrawFrameControl
CreateDialogIndirectParamW
kernel32
VirtualQuery
WriteFile
GetVersion
FindCloseChangeNotification
GetCommModemStatus
GetTempPathA
FindNextChangeNotification
GetOverlappedResult
LockFile
FormatMessageA
FileTimeToLocalFileTime
SetEndOfFile
RaiseException
GetLocaleInfoA
SystemTimeToFileTime
GlobalFindAtomW
UnlockFile
IsValidLocale
FindResourceExW
CompareStringA
GetModuleHandleA
GetModuleFileNameA
lstrcmpiA
GetFullPathNameA
UnmapViewOfFile
LocalAlloc
VerSetConditionMask
SetupComm
MoveFileW
SetThreadAffinityMask
GetTickCount
GetSystemWindowsDirectoryA
SetCommTimeouts
CreatePipe
FindNextFileA
lstrcmpiW
GetDateFormatW
GetAtomNameA
EnumResourceNamesA
FindNextFileW
Sleep
SetCommBreak
IsBadStringPtrW
GlobalGetAtomNameA
lstrcatA
CompareStringW
CreateSemaphoreW
lstrlenW
TryEnterCriticalSection
GetThreadPriority
UnhandledExceptionFilter
ClearCommError
OpenFileMappingA
HeapWalk
GlobalAddAtomW
QueryDosDeviceW
GetVersionExW
FreeResource
AddAtomW
msvcrt
swscanf
atoi
fgets
vsprintf
exit
wcsncpy
fseek
_controlfp
strtok
getenv
__set_app_type
fclose
__p__fmode
__p__commode
iswalpha
isspace
getc
_amsg_exit
_initterm
isdigit
_ismbblead
_XcptFilter
wcsncmp
_vsnwprintf
wcstok
toupper
strncpy
_exit
_cexit
malloc
remove
fprintf
srand
putchar
isprint
iswprint
fputs
iswspace
__setusermatherr
fread
perror
gmtime
wcstol
wcscoll
iswxdigit
wcscpy
__getmainargs
mbtowc
Exports
Exports
?CreatDlgItemList@@YGKPBDDPAX:O
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.exp Size: 512B - Virtual size: 121B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edit Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ixport Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sims Size: 512B - Virtual size: 472B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ndat Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ