M:\ttFQzrzlrvnutg\kfeyehunyzx\ihimjqriiHasof\bnEZgsock\qxlmmuJ.pdb
Static task
static1
Behavioral task
behavioral1
Sample
25ccdc8608089e20c93c0d1b7ffdcfeb_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
25ccdc8608089e20c93c0d1b7ffdcfeb_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
25ccdc8608089e20c93c0d1b7ffdcfeb_JaffaCakes118
-
Size
216KB
-
MD5
25ccdc8608089e20c93c0d1b7ffdcfeb
-
SHA1
560871eb7d10a90cf37f3431d0312fdf5b36bf63
-
SHA256
434e0d1f4cb2f5cf23df4ec80cea80359d567c68d4f53b9f7b737b16a056a767
-
SHA512
b182bbd682948dc4562b94c691ebd5613c2c9291f40691ed2cff167413d2545a79ff3475b7d59f6db4b8007f1b6a2c636f5149e5bb5d9cb07b605470ed8cf709
-
SSDEEP
6144:TfnW6yshlf5Apwg/2XjlhVzT/nuHBd16zffW:TWGhlxYqzlfLnuh76zf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25ccdc8608089e20c93c0d1b7ffdcfeb_JaffaCakes118
Files
-
25ccdc8608089e20c93c0d1b7ffdcfeb_JaffaCakes118.exe windows:5 windows x86 arch:x86
0b60756dfbc45ea13fa466d39ef398e6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
SetViewportExtEx
GetTextColor
TextOutA
PtVisible
SaveDC
GetTextExtentPointW
RealizePalette
SetBitmapDimensionEx
Polygon
PolyBezier
SetLayout
EnumFontFamiliesW
GetNearestPaletteIndex
CreateHalftonePalette
RoundRect
CreateRectRgnIndirect
SetDIBitsToDevice
version
VerQueryValueA
comdlg32
GetFileTitleW
GetOpenFileNameA
PrintDlgExW
PrintDlgW
PageSetupDlgW
kernel32
GetComputerNameExW
GlobalGetAtomNameA
LoadLibraryW
GetVersion
IsValidLocale
SetEndOfFile
CreateFileA
GetUserDefaultLangID
FreeResource
GetCommProperties
SearchPathA
OpenEventA
GlobalLock
WaitForMultipleObjectsEx
FindResourceW
RaiseException
EnumResourceNamesA
GetModuleHandleW
user32
GrayStringW
GetWindowLongA
ShowCaret
LockWindowUpdate
ChildWindowFromPoint
ShowWindowAsync
GetDialogBaseUnits
GetAltTabInfoW
CharUpperA
GetWindowDC
GetMenuItemID
ClipCursor
LoadImageA
IsCharAlphaNumericW
ChildWindowFromPointEx
GetScrollInfo
SetDlgItemInt
ValidateRect
IsRectEmpty
GetMenuItemCount
OemToCharA
BeginDeferWindowPos
RegisterClassA
GetScrollRange
UpdateWindow
GetActiveWindow
PostMessageA
LoadImageW
LoadAcceleratorsW
MessageBoxExA
DefFrameProcA
GetUserObjectInformationA
GetTopWindow
GetClassInfoExA
GetKeyboardType
ScreenToClient
AdjustWindowRect
msvcrt
memcpy
Exports
Exports
AlphaBlend
GradientFill
TransparentBlt
?IDdkJjkdID7@@YGKEPA_WG@Z
Sections
.text Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bld_1 Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bld_2 Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bld_3 Size: 512B - Virtual size: 509B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.debug Size: 512B - Virtual size: 119B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 141KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ