m:\oegfv.pdb
Static task
static1
Behavioral task
behavioral1
Sample
28900e8f7de6c09b58d2008b339d2cf2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
28900e8f7de6c09b58d2008b339d2cf2_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
28900e8f7de6c09b58d2008b339d2cf2_JaffaCakes118
-
Size
510KB
-
MD5
28900e8f7de6c09b58d2008b339d2cf2
-
SHA1
a8013e38d468f39382bb10510cf92ee382b0cdbe
-
SHA256
1e9a5a29479bbc811c17c16178fc56d3b55feea0506d844ac8791c1cde9adea0
-
SHA512
c0bec23f63e59bce64e05faa43c1610de1ce34e63f87fcf8535a8bfaba8d75e52156ec7853631af84a1ed1bec6d29a24556fe1c43e2d0525d9b2f46552141510
-
SSDEEP
12288:+D7LhEokyrvAT3PlEfQXkn9hH6cKuqkN+M:+nl40AT5Q/HRb9sM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28900e8f7de6c09b58d2008b339d2cf2_JaffaCakes118
Files
-
28900e8f7de6c09b58d2008b339d2cf2_JaffaCakes118.exe windows:4 windows x86 arch:x86
407d00c0665872820b6e4ae5defd7644
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetStringTypeA
FlushFileBuffers
RtlUnwind
VirtualFree
lstrcmp
DeleteCriticalSection
HeapFree
GetTickCount
AddAtomW
GetCommandLineA
TerminateProcess
GetSystemTime
GetCurrentProcessId
CreateDirectoryExW
EnterCriticalSection
GetCurrentThreadId
GetStartupInfoW
GetModuleHandleA
GetLocalTime
GetStartupInfoA
HeapAlloc
GetStringTypeW
ReadFile
LoadLibraryA
HeapReAlloc
InterlockedExchange
GetCommandLineW
CompareStringA
GetACP
DosDateTimeToFileTime
FreeEnvironmentStringsW
DeleteFileA
GetCPInfo
QueryPerformanceCounter
GetModuleFileNameW
GetCurrentProcess
CopyFileExA
InitializeCriticalSection
UnhandledExceptionFilter
GetTimeZoneInformation
TlsFree
WriteProfileSectionA
GetVolumeInformationA
EnumCalendarInfoExA
SetStdHandle
GetProfileIntW
VirtualAlloc
Sleep
TlsGetValue
FreeEnvironmentStringsA
TlsSetValue
WideCharToMultiByte
MultiByteToWideChar
InterlockedDecrement
SetEnvironmentVariableA
GetCurrentThread
LCMapStringA
ExitProcess
IsBadWritePtr
FoldStringA
CreateWaitableTimerA
HeapDestroy
GetSystemTimeAsFileTime
GetFileSize
CreateMutexA
OpenMutexA
CloseHandle
LCMapStringW
SetFilePointer
OpenFileMappingA
GetFileType
SetHandleCount
SetCriticalSectionSpinCount
WriteFile
CompareStringW
GetLastError
GetVersion
SetLastError
GetStdHandle
LeaveCriticalSection
GetEnvironmentStrings
InterlockedIncrement
GetModuleFileNameA
VirtualQuery
TlsAlloc
HeapCreate
GetProcAddress
GetTempFileNameW
WaitForSingleObjectEx
GetEnvironmentStringsW
comdlg32
LoadAlterBitmap
FindTextA
user32
ShowWindow
RegisterClassA
CreateAcceleratorTableA
BroadcastSystemMessageW
ShowOwnedPopups
MessageBoxW
CreateWindowExA
DdeCreateDataHandle
RegisterClassExA
DrawTextA
WaitForInputIdle
comctl32
ImageList_Draw
ImageList_Remove
CreateStatusWindowA
ImageList_Copy
ImageList_Merge
DrawStatusTextA
MakeDragList
ImageList_LoadImage
DrawStatusText
ImageList_EndDrag
ImageList_Create
InitCommonControlsEx
GetEffectiveClientRect
ImageList_DrawIndirect
ImageList_AddMasked
CreatePropertySheetPageW
ImageList_GetImageCount
ImageList_LoadImageA
ImageList_SetDragCursorImage
ImageList_AddIcon
ImageList_GetImageRect
ImageList_GetBkColor
ImageList_ReplaceIcon
Sections
.text Size: 362KB - Virtual size: 361KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ