R:\xiJhNEiret\XsyRazwyokkfGd\ntudJyJL\zziCjughkOaihy\foyexmwhuUhb.pdb
Static task
static1
Behavioral task
behavioral1
Sample
19f4828ad69b2c35605a368c87b5753b_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
19f4828ad69b2c35605a368c87b5753b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
19f4828ad69b2c35605a368c87b5753b_JaffaCakes118
-
Size
209KB
-
MD5
19f4828ad69b2c35605a368c87b5753b
-
SHA1
552e006402eba98d0f83db85189db8250f167b17
-
SHA256
de23acd002f2e10adc1cbb568b1e7a761308855704ab1385387e59b49eaac255
-
SHA512
dab7b2b2b816eee1a089d9c3e1b61f8435ae55240d979a4f907b1fefd10a137640e7bb402d12459ffb83c46aa67f464884ac4e0ec8ba120f5145caa22667a539
-
SSDEEP
6144:W65f6ReUzbHL1CAd8IGc8UbyQzWqPJU6:W6UwOHLzdvkUby1qxU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19f4828ad69b2c35605a368c87b5753b_JaffaCakes118
Files
-
19f4828ad69b2c35605a368c87b5753b_JaffaCakes118.exe windows:5 windows x86 arch:x86
260cc103786d5e53cc918bd935709e80
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
DestroyMenu
AppendMenuA
SetDlgItemTextW
SetDlgItemInt
InsertMenuW
ScreenToClient
SetMenuDefaultItem
DrawIcon
RegisterWindowMessageW
HiliteMenuItem
IsMenu
GetMessagePos
DrawStateW
GetDlgItemInt
CharUpperBuffA
LoadImageA
GetDlgItemTextA
SystemParametersInfoW
DialogBoxIndirectParamW
keybd_event
SendMessageA
BringWindowToTop
CreateIconIndirect
GetMenuStringW
GetDlgItemTextW
CallWindowProcW
IsCharAlphaW
CharToOemA
SetCursorPos
ShowOwnedPopups
SetWindowRgn
SetLastErrorEx
IsCharUpperA
SetFocus
MessageBoxExW
GetFocus
ClipCursor
SetMenu
SetUserObjectInformationW
TrackPopupMenu
SendMessageTimeoutA
shlwapi
ChrCmpIA
StrToIntA
PathRemoveBlanksW
StrToInt64ExA
comdlg32
PrintDlgExW
GetSaveFileNameA
comctl32
ImageList_GetImageCount
CreateToolbarEx
CreateStatusWindowW
ImageList_Draw
ImageList_Create
gdi32
Polyline
GetDeviceCaps
SetLayout
SetDIBits
GetTextExtentExPointW
EnumFontFamiliesExW
CreateRoundRectRgn
LineDDA
ScaleWindowExtEx
GetBitmapBits
RoundRect
RectVisible
GetTextFaceW
PathToRegion
TextOutA
RemoveFontResourceW
CreateHatchBrush
msvcrt
swprintf
_controlfp
__set_app_type
fgets
__p__fmode
__p__commode
_amsg_exit
fflush
_initterm
_acmdln
exit
_ismbblead
wcstok
wcscspn
fclose
_XcptFilter
atol
bsearch
_exit
wcscat
_cexit
strspn
__setusermatherr
__getmainargs
putchar
mktime
kernel32
SetThreadLocale
HeapFree
FormatMessageA
SetThreadExecutionState
SetThreadAffinityMask
GetCommTimeouts
DeleteCriticalSection
GetProcAddress
GetThreadLocale
SetCommBreak
GetModuleFileNameW
GlobalAddAtomA
GetAtomNameA
WriteFile
lstrcatW
EscapeCommFunction
CreateEventA
ExitProcess
RegisterWaitForSingleObject
GetWindowsDirectoryA
Exports
Exports
?ShowAnchorOld@@YG_NKGK&U
?SetStringOld@@YGPAKPAM&U
?ShowClassExA@@YGPAXPAKNPAI&U
?FindRect@@YGFDPAHMM&U
?ValidateModuleA@@YGXMPAN&U
?GenerateSizeA@@YGHKD&U
?RtlExpressionA@@YGJH&U
?KillKeyboardExW@@YGHH&U
?DeleteEventEx@@YGDPA_NPAEPAMJ&U
?IsNotDirectoryA@@YGPAIPAD&U
?ValidateWidthExA@@YGDGPAND&U
?DateExA@@YGPAGPAHPAKE&U
?LoadTimeNew@@YGPA_NHPAKGK&U
?CopyMutantExW@@YGMPADPAKPAG&U
?RemoveTimeExW@@YGPAHM_NEE&U
?GenerateWidthA@@YGPAIPAEPA_N&U
?FindExpressionA@@YGKJPAD_N&U
?EnumListItemOld@@YGXIPAJ&U
?CopyRectA@@YGXE&U
?SendCharEx@@YGPAFM&U
?InvalidateWindow@@YGKHPADF&U
?CrtMessage@@YGJPAHPAE&U
?CloseFullNameNew@@YGEEGPAEJ&U
?SetClassExA@@YGPAXDMEH&U
?LoadRectNew@@YGXKMFM&U
?IsComponentOld@@YGDPAIHM&U
?KillComponentOriginal@@YGPAK_NPAFI&U
?GlobalNameNew@@YGXDPAK&U
?AddTime@@YGPAFJPAE&U
?InvalidateStateA@@YGPAIPAD_NPAH&U
?SetFileNew@@YGFMPAH&U
?IsNotListExA@@YGEPAM&U
?IsModuleOld@@YGGPAGIEH&U
?Profile@@YGKKKM&U
?DecrementMutexOriginal@@YGPAEMG&U
?CopyStateOriginal@@YGIHPAIPAJPAF&U
?InsertKeyboardA@@YGGDFF&U
?CallPointerExA@@YGEDJPANE&U
?NameEx@@YGPANJGJPAH&U
?IncrementConfigNew@@YGJPAEKGPA_N&U
?GetMessageA@@YGMI&U
?CloseMessageOriginal@@YGKPAMPAD&U
?CallModuleNew@@YGPAID&U
?ModifyWindowA@@YGPAEIJ&U
?DecrementPenNew@@YGFJG&U
?ValidateKeyNameOld@@YGJH_NPAI&U
?OnDialogExW@@YGXENF&U
?InvalidateRectW@@YGDPA_NPAF&U
?LoadHeightOld@@YGGINJE&U
?ValidateRect@@YGEPAFD&U
?IncrementDateNew@@YGFPAFK&U
?IsNotMediaTypeExW@@YGPAKFPAG&U
?InsertFileNew@@YGGGKI&U
?PutKeyNameOriginal@@YG_NGN&U
?RtlFile@@YGPAXMPAHF&U
?InvalidateClassExA@@YGDPAH&U
?SetPenOriginal@@YGPANPAJPAHG&U
?GetPathNew@@YGPAHIDI&U
?GetFilePathExW@@YGPAMPAID&U
?GlobalValueW@@YGHEHJ&U
?InsertMutexExW@@YGPAIFG&U
?HideDateTimeExA@@YGMPA_NPAINF&U
?FullNameOriginal@@YGEPAEPAKF&U
?FormatDataExA@@YGPAJPANPAN&U
?CallNameOld@@YGGPAIHPAJK&U
?DecrementSectionOld@@YGXIJHK&U
?FreeMutexExA@@YGFPAHIPAME&U
?OnAppNameW@@YGXHPAKPAM&U
?CancelFileOriginal@@YGNPANG&U
?FolderPathEx@@YGJMJ_N&U
?GlobalWindowInfoExW@@YGMPAEHHPAJ&U
?RtlFullName@@YGXPAHHI&U
?DecrementOptionA@@YGPAHF&U
?CancelCommandLineExA@@YGFIPAJ&U
?AddValueExA@@YGENMPAKG&U
?AddFileEx@@YGPAJK&U
?ShowDataNew@@YGEKPA_NMG&U
?InvalidateListItemExA@@YGPANPAMGFE&U
?CrtFileNew@@YGPAEGPAIN_N&U
?CloseCommandLineExW@@YGGJM&U
?InstallWidthNew@@YGMG_NF&U
?ValidatePointerNew@@YGPAMI&U
?CopyClassA@@YGFDKPAFPAH&U
?LoadTextW@@YGPAGPA_NPA_N&U
?AddFolderPathEx@@YGPAXK&U
?CallOptionW@@YGXPAMHHPAH&U
?FreeExpressionOld@@YGXMFD&U
?OnHeaderExW@@YGFPAN&U
?AddProcessExW@@YGPAGDH&U
?IsValidModuleW@@YGPAEH&U
?PutKeyboardOriginal@@YG_NIM&U
?FormatSemaphoreOriginal@@YGFI&U
?InsertModuleA@@YGPAXDPAK&U
?IsSizeW@@YGDFEPAJI&U
?RemoveProjectEx@@YGDHK_N&U
?LoadProviderOld@@YGPAGI&U
?IsNameOriginal@@YGPAID&U
?FindProjectOld@@YGXG&U
?ModifyMutexExW@@YGPAFKPAI_N&U
?ValidateObject@@YGXDMEE&U
?IsNotScreenOriginal@@YGPAXK&U
?RemoveSizeNew@@YG_NPAE&U
?OnKeyboardExW@@YGXE&U
?FormatMemoryOld@@YGKK_N&U
?OnClassExA@@YGGJPAE&U
?DeleteVersionW@@YGPAXM&U
?InsertTextOld@@YGDKH&U
?InvalidatePenNew@@YGXPAHE&U
?CallSectionExW@@YGXDII_N&U
?ValidateCommandLineNew@@YGPAHPAD_NPAMPAI&U
?GetTextA@@YGJDJPADE&U
?LoadKeyboardNew@@YGPA_NJEG&U
?SetDevice@@YGIPAD&U
?ShowFunctionOld@@YGPAGIPA_N&U
?CallExpressionExW@@YGKEI&U
?GetMutant@@YGPAKHI&U
?IncrementTaskOld@@YGXKGGPAM&U
?FormatFunctionOld@@YGPAFE&U
?ClosePathA@@YGGGPAJPAK&U
?KillPointerNew@@YGPADIDPAD&U
?DecrementDeviceExW@@YGPAJGPAF_N&U
?InvalidateKeyboardExW@@YGJPAM&U
?ShowDateTimeOld@@YGPADJK&U
?CallNameNew@@YGMME&U
?ValidateSemaphoreExW@@YGMPAGNEPAK&U
?KillComponentNew@@YGIJ&U
?CrtTimerEx@@YGPADMPAKF&U
?LoadObject@@YGMPAKPAK&U
?IsDirectoryExW@@YGFPAH&U
?GlobalPointEx@@YGMG&U
?DecrementClassExA@@YG_NPAFPAE&U
?CloseDateA@@YGPAEPAHG&U
?DeleteMemoryEx@@YGFPAII&U
?IsListA@@YGFJJ&U
?CloseValueW@@YGGGKD&U
?CloseExpressionOriginal@@YGGPAIGD&U
?CallModule@@YGIFDK&U
?GlobalThreadW@@YGPAKKKJ&U
?FindPenEx@@YGPAHPAD&U
?CrtObjectExA@@YGPAME&U
?InsertMainStructDlhSi@@YGKGH@Z
?FormatPenA@@YGJFMPAH&U
?OnArgumentExW@@YGN_NPAGPAIPAN&U
?GlobalDateTimeNew@@YGGJPAIPAK&U
?GlobalListItemOld@@YGEFPAIJ&U
?LoadFullNameA@@YGMPAK&U
?ValidateMutex@@YGKPA_NK&U
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rimp Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdbg1 Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.redt Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rit Size: 1024B - Virtual size: 520B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdbg2 Size: 512B - Virtual size: 94B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rvar Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rpt Size: 1024B - Virtual size: 757B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ping Size: - Virtual size: 189KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 170KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ