h:\zqevs.pdb
Static task
static1
Behavioral task
behavioral1
Sample
17d178c99950bb515c388b05e9d996ed_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
17d178c99950bb515c388b05e9d996ed_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
17d178c99950bb515c388b05e9d996ed_JaffaCakes118
-
Size
458KB
-
MD5
17d178c99950bb515c388b05e9d996ed
-
SHA1
d9b999456bcd154f1ba8c5a9d82bc1dc89fcfa83
-
SHA256
5aa609eeea31bfb8e29597107845545259dcc1b1ecf18c9b8ad81dc208ba5a98
-
SHA512
2b7964aafc9594ab127506bf89e369dbd98151f72a47fc748add749eadf1b2927fec484f8ac5e8196ec0961a29eebec46777f5e82bb90fdfb0e9c425ecd9f77f
-
SSDEEP
12288:0FGGlwzZQCgXMJ0zKDqHDz6IMhwNTb3uQs:0vlwd2hzKDq5Hxrs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17d178c99950bb515c388b05e9d996ed_JaffaCakes118
Files
-
17d178c99950bb515c388b05e9d996ed_JaffaCakes118.exe windows:4 windows x86 arch:x86
8c28c35f1866efd97fe4f97e24384f7d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comdlg32
ReplaceTextA
ChooseColorA
comctl32
InitCommonControlsEx
user32
DdeSetUserHandle
ShowScrollBar
IsDialogMessageW
DestroyIcon
SetSysColors
RegisterClassExA
RegisterClassA
DestroyMenu
kernel32
HeapReAlloc
GetStdHandle
CompareStringA
GetStringTypeW
GetSystemTimeAsFileTime
SetComputerNameA
SetLocalTime
ReadFile
EnterCriticalSection
GetProcAddress
GetPriorityClass
DeleteCriticalSection
GetNumberFormatA
UnhandledExceptionFilter
InterlockedIncrement
FlushFileBuffers
VirtualQuery
GetCPInfo
FreeEnvironmentStringsW
SetHandleCount
GetModuleHandleA
VirtualFree
GetTickCount
IsBadWritePtr
TlsAlloc
LCMapStringA
GetTimeZoneInformation
InterlockedExchange
GetEnvironmentStrings
InitializeCriticalSection
GlobalDeleteAtom
LCMapStringW
GetFileType
LoadLibraryA
GetCommandLineW
WideCharToMultiByte
HeapCreate
AddAtomW
CreateFileA
TerminateProcess
GetCurrentProcessId
lstrcpyW
GetStartupInfoW
GetModuleFileNameA
OpenMutexA
GetCommandLineA
LeaveCriticalSection
HeapFree
LockFile
TlsFree
MultiByteToWideChar
VirtualAlloc
GetLocalTime
GetVersion
SetLastError
CreateMutexA
GetCurrentProcess
GetSystemTime
GetLastError
TlsSetValue
GetProcAddress
HeapDestroy
ExitProcess
WriteFile
SetStdHandle
HeapAlloc
CompareStringW
GetCurrentThreadId
GetThreadSelectorEntry
GetStringTypeA
InterlockedDecrement
GetCurrentThread
FreeEnvironmentStringsA
GetEnvironmentStringsW
TlsGetValue
WriteConsoleW
QueryPerformanceCounter
SetWaitableTimer
GetStartupInfoA
SetFilePointer
GetModuleFileNameW
RtlUnwind
CloseHandle
SetThreadLocale
SetEnvironmentVariableA
gdi32
GetPixelFormat
GetCharWidthFloatW
TranslateCharsetInfo
GetCharWidthA
CreateRectRgn
PatBlt
SetWindowExtEx
SetGraphicsMode
CopyEnhMetaFileW
SetMetaRgn
CreateBitmap
DeleteColorSpace
Sections
.text Size: 288KB - Virtual size: 288KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 51KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ