O:\gxpxniku\kseSFiVq\XoEqHhmaiHLu\sQanwpciHcxnQ.pdb
Static task
static1
Behavioral task
behavioral1
Sample
09a6ac73657a32fdafcd33f7fd91ab2a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
09a6ac73657a32fdafcd33f7fd91ab2a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
09a6ac73657a32fdafcd33f7fd91ab2a_JaffaCakes118
-
Size
221KB
-
MD5
09a6ac73657a32fdafcd33f7fd91ab2a
-
SHA1
c4f46df9b0b6a576534c49014c8a0aaaff39854b
-
SHA256
31fb38395e033e439b3effe87c2eac7d277bd3dc5fe92fc3959d68e5a4a2650f
-
SHA512
b576a2aa92ccf0c355808ae88f34de3f63e417d5409ffb6d76f02a2b2f6138350533e9f8c547c7748b5ab5ce73d6ba1adca85d38332a52fae63cc51f1af6fc36
-
SSDEEP
3072:oe8FQYVv7NltAxTRzVqT0M2SV1zZiTuiwCUoGxzBrb6LOm/COoHPp7TLAQz5HB9I:YnV5lKRzwXATumUBzFboZ/BgqQJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09a6ac73657a32fdafcd33f7fd91ab2a_JaffaCakes118
Files
-
09a6ac73657a32fdafcd33f7fd91ab2a_JaffaCakes118.exe windows:5 windows x86 arch:x86
13162ebc381ccf4d57b272d159c9edb6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
_controlfp
localtime
__set_app_type
__p__fmode
wcstombs
__p__commode
_amsg_exit
wcscoll
_initterm
_acmdln
fclose
exit
_ismbblead
wcsncpy
_XcptFilter
_exit
strtol
_cexit
wcsncmp
__setusermatherr
vswprintf
sscanf
__getmainargs
strspn
gdi32
Polygon
CreateRectRgnIndirect
RoundRect
SaveDC
ScaleWindowExtEx
FillRgn
BeginPath
BitBlt
GetFontData
SetLayout
SetPaletteEntries
PtInRegion
SetBkMode
TextOutW
TranslateCharsetInfo
comctl32
ImageList_Remove
ImageList_GetIconSize
ImageList_Destroy
kernel32
LocalAlloc
CreateMailslotW
GetTempPathW
VerSetConditionMask
SetSystemTime
SetLocalTime
SetTimerQueueTimer
lstrlenA
IsBadCodePtr
LoadLibraryExA
GetOverlappedResult
FindFirstFileA
TryEnterCriticalSection
SizeofResource
CreateThread
GetShortPathNameW
GlobalMemoryStatusEx
user32
GetClassLongA
GetSubMenu
GetDlgItemTextA
WaitForInputIdle
GetSystemMenu
MessageBoxExW
IsZoomed
EndPaint
MessageBoxExA
GetMessageExtraInfo
DialogBoxIndirectParamA
DrawIcon
GetMessageTime
SetDlgItemInt
KillTimer
keybd_event
FindWindowExW
MessageBoxW
GetScrollRange
DefWindowProcW
GetClassInfoW
CharLowerA
PostMessageW
AdjustWindowRectEx
GetUserObjectInformationW
IsCharAlphaNumericA
GetWindowDC
InSendMessage
IsCharAlphaNumericW
SetMenu
ShowCaret
OpenIcon
CallWindowProcA
MapVirtualKeyA
EnumChildWindows
InsertMenuItemW
Exports
Exports
AlphaBlend
GradientFill
TransparentBlt
?ExecuteImageEUYIDH@@YGKEPA_WG@Z
Sections
.text Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idat Size: 512B - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dat_0 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdiag Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dat_1 Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dat_2 Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ydiag Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ