D:\DefFfkuXoarNZS\uiSIyyYzr\awncLeJrhxcz.pdb
Static task
static1
Behavioral task
behavioral1
Sample
173ea469f0d832d245fd183705879cc7_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
173ea469f0d832d245fd183705879cc7_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
173ea469f0d832d245fd183705879cc7_JaffaCakes118
-
Size
220KB
-
MD5
173ea469f0d832d245fd183705879cc7
-
SHA1
f8c7abc830e1ffdd85e9fdf54add14a7133e1636
-
SHA256
2f7b6938bfb3473718bd3695b6447720cec5262893bf454545c8cf395c53a108
-
SHA512
f624cb4ef294e0c3cf5782d06916b6a145d9755f6c771fb55f75b787794d1021ebd26117825e9b76920b0fb0d5bad44796b540c89ee356eb7827022866efa673
-
SSDEEP
3072:D9zsYKbcHnbbUF6VdT8FiZV/uFR/8Ro9cvw479S0FPOF0EdGMN9WcFe4SkC:DhstbcHnbfdTYiZwyacvwaVk0SW2F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 173ea469f0d832d245fd183705879cc7_JaffaCakes118
Files
-
173ea469f0d832d245fd183705879cc7_JaffaCakes118.exe windows:5 windows x86 arch:x86
895099367f56d668f616b6434e4ccc2a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
AdjustWindowRectEx
DialogBoxParamW
CharPrevA
IsCharAlphaNumericW
GetClassInfoA
SetClassLongW
LoadBitmapW
GetMessageW
GetNextDlgTabItem
TabbedTextOutW
wsprintfA
TrackPopupMenuEx
OpenInputDesktop
DefDlgProcA
ClientToScreen
LoadCursorW
SetSysColors
ScreenToClient
GetSubMenu
IsDlgButtonChecked
InvalidateRect
SwitchToThisWindow
ArrangeIconicWindows
MapVirtualKeyExW
ChildWindowFromPoint
SetScrollInfo
KillTimer
DrawAnimatedRects
AppendMenuW
OffsetRect
SetTimer
MessageBoxW
GetScrollPos
InternalGetWindowText
SetUserObjectInformationW
IsCharAlphaW
InSendMessage
EqualRect
ActivateKeyboardLayout
DefWindowProcW
RegisterWindowMessageW
MonitorFromPoint
UnloadKeyboardLayout
GetUpdateRgn
GetDlgItemInt
InvalidateRgn
GetParent
gdi32
SetBitmapBits
ScaleWindowExtEx
SaveDC
CreateFontW
CreateRoundRectRgn
RectVisible
CreateRectRgnIndirect
LineDDA
CreateDIBitmap
GetPaletteEntries
CreatePatternBrush
GetSystemPaletteUse
CreateDCW
FillRgn
CreateSolidBrush
BitBlt
PtVisible
SetBitmapDimensionEx
StartPage
kernel32
CallNamedPipeW
LockResource
EnumSystemLocalesA
IsDBCSLeadByte
MoveFileExW
WinExec
QueryDosDeviceW
GetWindowsDirectoryA
HeapFree
GetModuleHandleA
LoadLibraryW
GetFullPathNameW
GetComputerNameExW
lstrcmpA
MoveFileA
GetLocalTime
lstrlenA
VirtualQuery
InitializeCriticalSection
IsDBCSLeadByteEx
GetTempPathA
GetTickCount
SetSystemTime
msvcrt
wcsncmp
vsprintf
_controlfp
__set_app_type
__p__fmode
__p__commode
_amsg_exit
isalnum
wcstok
isprint
fputs
_initterm
_acmdln
exit
wcsrchr
towupper
_ismbblead
_XcptFilter
_exit
fgetc
_cexit
getenv
strchr
__setusermatherr
iswspace
sscanf
__getmainargs
shlwapi
ord29
StrToIntExA
comdlg32
ChooseFontW
PrintDlgExW
Exports
Exports
?CrtPointExW@@YGPAGPAFEPAKM~U
?HideExpressionOld@@YGPAHE~U
?FindAnchorEx@@YGHMHPA_NF~U
?SendTaskExA@@YGMJ_NE~U
?HideListOld@@YGKPAJPADK~U
?StringExW@@YGPAKPAJMKE~U
?SendProcessExW@@YGPAEIPAEPAGF~U
?LoadCommandLineExA@@YGPAX_NHPADPAD~U
?InsertListExW@@YGPAXPAMMPAD~U
?SetScreenEx@@YGPAFIE~U
?DumpDigitalDataCBhJEB@@YGKGHE@Z
?DeleteDataW@@YGEJEH~U
?DecrementDateTimeOld@@YGPAXPAIID~U
?GenerateClassExA@@YGPAFPAJ~U
?HideWidthExW@@YGJI~U
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.init Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tidat Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tedat Size: 1024B - Virtual size: 751B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.alloc Size: - Virtual size: 187KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 187KB - Virtual size: 187KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ