m:\otg\ieocwote.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2b55711aeb6a407d1be9351383d7f1c7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2b55711aeb6a407d1be9351383d7f1c7_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2b55711aeb6a407d1be9351383d7f1c7_JaffaCakes118
-
Size
624KB
-
MD5
2b55711aeb6a407d1be9351383d7f1c7
-
SHA1
a50ec33275d00337296c07e37faeb8ad7d855ca1
-
SHA256
d83a6680ef9ce15343c00be40a8319a0119ad086c675dff8627524065fe14656
-
SHA512
3da4825022f945854be7dcfe81c36252a0591b985134304c0790b8763169fe5bfba1b8e2fe213580dbbdf5c390c208f0d0be25adf53764010d4640cf184dde93
-
SSDEEP
12288:Qj5oD/dxQfiBjim2AEcIk8pGDykE+j93gevX8LbjVF3kx3VCPQ03287Rnmu:smxx2iBim2AE1kgGG+jvvMLbjVF6/03z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b55711aeb6a407d1be9351383d7f1c7_JaffaCakes118
Files
-
2b55711aeb6a407d1be9351383d7f1c7_JaffaCakes118.exe windows:4 windows x86 arch:x86
0d318c8e92143324e63c5d5b87d5686b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shell32
SHEmptyRecycleBinA
SHBrowseForFolderA
ExtractIconEx
SHInvokePrinterCommandW
ShellExecuteW
kernel32
GetTimeFormatA
DeleteCriticalSection
LocalSize
GetCommandLineW
GetDateFormatA
GetCommandLineA
GetConsoleCursorInfo
IsBadReadPtr
GetCurrentThreadId
GetLocaleInfoW
TlsAlloc
GetSystemInfo
HeapReAlloc
GetStringTypeA
SetEnvironmentVariableA
SetHandleCount
DebugBreak
LoadLibraryA
EnterCriticalSection
CreateDirectoryA
HeapCreate
GlobalGetAtomNameA
GetLastError
UnhandledExceptionFilter
HeapSize
GetProcAddress
WritePrivateProfileStringA
SetLastError
ResumeThread
TlsGetValue
HeapDestroy
EnumSystemLocalesA
GetStringTypeW
LCMapStringA
GetUserDefaultLCID
WaitForMultipleObjects
SetLocaleInfoW
SetWaitableTimer
GetStdHandle
RtlUnwind
InterlockedExchange
GetSystemTimeAsFileTime
SetStdHandle
VirtualUnlock
IsValidLocale
GetStartupInfoA
ReadFile
SleepEx
IsValidCodePage
LCMapStringW
CompareStringW
GetShortPathNameA
OutputDebugStringA
TlsFree
FreeEnvironmentStringsA
SetConsoleCtrlHandler
GetEnvironmentStringsW
GetTimeZoneInformation
VirtualQuery
TlsSetValue
GetPrivateProfileSectionNamesW
GetCPInfo
GetModuleFileNameA
GetVersionExA
CloseHandle
VirtualFree
GetModuleHandleA
GetFileType
SetFilePointer
InterlockedIncrement
MultiByteToWideChar
WideCharToMultiByte
FindResourceExW
SetConsoleTextAttribute
FillConsoleOutputCharacterA
GetCurrentThread
OpenSemaphoreW
GetEnvironmentStrings
HeapFree
HeapValidate
GetFullPathNameA
LeaveCriticalSection
GetLocaleInfoA
VirtualAlloc
GetCurrentProcessId
FlushFileBuffers
OpenMutexA
HeapAlloc
ExitProcess
CompareStringA
IsBadWritePtr
VirtualFreeEx
GetCurrentProcess
InitializeCriticalSection
WriteConsoleInputA
GetNamedPipeInfo
TryEnterCriticalSection
GetTickCount
CreateMutexA
GetACP
GetOEMCP
WriteFile
GetConsoleMode
InterlockedDecrement
FreeEnvironmentStringsW
WaitNamedPipeA
lstrcpynA
ResetEvent
TerminateProcess
SetThreadAffinityMask
VirtualProtect
QueryPerformanceCounter
user32
AnimateWindow
WaitForInputIdle
ToAsciiEx
BeginDeferWindowPos
OpenDesktopW
RegisterClassA
IsIconic
EnumWindows
FreeDDElParam
SetParent
ClipCursor
GetSubMenu
RegisterClassExA
DdeUninitialize
UnregisterDeviceNotification
GetWindow
SetRectEmpty
SetClassLongA
MapVirtualKeyExA
WinHelpW
MenuItemFromPoint
comdlg32
ChooseFontA
PageSetupDlgW
ChooseFontW
ReplaceTextA
comctl32
ImageList_DrawEx
CreateStatusWindow
DrawInsert
ImageList_Add
ImageList_DragMove
ImageList_SetFilter
ImageList_GetDragImage
CreatePropertySheetPageA
InitCommonControlsEx
ImageList_GetBkColor
ImageList_GetIcon
ImageList_GetImageRect
_TrackMouseEvent
ImageList_SetBkColor
InitMUILanguage
CreateStatusWindowW
ImageList_Create
Sections
.text Size: 228KB - Virtual size: 227KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256KB - Virtual size: 254KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ