calc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
28b8ae839799c02b90dea21ca4ae11e5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
28b8ae839799c02b90dea21ca4ae11e5_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
28b8ae839799c02b90dea21ca4ae11e5_JaffaCakes118
-
Size
199KB
-
MD5
28b8ae839799c02b90dea21ca4ae11e5
-
SHA1
3e8e6761ddf96f346bbb907152633573bcfdece7
-
SHA256
86d46bd0717f5254ef9d0d7f6c7761d4aca23369f1561fc376d37ef42ae22cea
-
SHA512
ccb10e18b9d06b54f4a8e4e8f76b257fc0351696fef6fda94466f3fb2e0cf3fa019fdd9270805896c2e82809b6e94af6334a5bc62fb0f6397fa7c25b9fb77b17
-
SSDEEP
6144:DtXtgU/PjsrMLlb9NI0L3caBQ6KybUc0y:DtXtFXj5V9i0LT62AS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28b8ae839799c02b90dea21ca4ae11e5_JaffaCakes118
Files
-
28b8ae839799c02b90dea21ca4ae11e5_JaffaCakes118.exe windows:6 windows x86 arch:x86
bd653b0c319981f28a2fb323427141b9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shell32
ShellAboutW
advapi32
RegCreateKeyW
RegSetValueExW
RegQueryValueExW
RegCloseKey
oleaut32
SysFreeString
SysAllocString
ole32
CoCreateInstance
ntdll
WinSqmAddToStream
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCommandLineW
GetProfileIntW
LocalAlloc
LocalFree
lstrcmpW
GetProfileStringW
LocalReAlloc
TerminateProcess
lstrlenW
CloseHandle
WaitForSingleObject
SetEvent
CreateThread
CreateEventW
ResetEvent
GlobalUnlock
GlobalSize
GlobalLock
Sleep
GlobalFree
GlobalAlloc
GlobalReAlloc
GetCurrentProcess
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
HeapSetInformation
UnhandledExceptionFilter
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedExchange
gdi32
SetTextColor
CreateFontIndirectW
SelectObject
DeleteObject
SetBkColor
SetBkMode
user32
SetDlgItemTextW
CheckMenuItem
CheckMenuRadioItem
SetWindowPos
OffsetRect
MapWindowPoints
GetClientRect
EnableWindow
LoadMenuW
SetWindowLongW
GetWindowLongW
GetMenu
CreateDialogParamW
GetDlgItem
DestroyMenu
DestroyWindow
SetMenu
GetWindowRect
SystemParametersInfoW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
IsChild
IsDialogMessageW
GetMessageW
LoadAcceleratorsW
SendMessageW
LoadStringW
SetProcessDefaultLayout
GetProcessDefaultLayout
SetProcessDPIAware
SetCursor
SetFocus
SetWindowTextW
CheckRadioButton
GetSubMenu
MessageBeep
MessageBoxW
EndDialog
DialogBoxParamW
GetSysColor
CloseClipboard
CharNextA
GetClipboardData
OpenClipboard
CallWindowProcW
HideCaret
DefWindowProcW
EnableMenuItem
IsClipboardFormatAvailable
GetDlgCtrlID
PostQuitMessage
DrawTextW
CheckDlgButton
GetWindowTextW
SetDlgItemInt
CharNextW
RegisterClassExW
GetSysColorBrush
LoadCursorW
LoadIconW
InvalidateRect
UpdateWindow
ShowWindow
CreateWindowExW
msvcrt
_wcsrev
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_amsg_exit
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
??3@YAXPAX@Z
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler4_common
_controlfp
memmove
toupper
_CxxThrowException
wcstoul
__CxxFrameHandler3
memset
memcpy
wcschr
Sections
.text Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 33KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
axvfgel Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE