C:\qqnJPqqfjamseuwrPky\iWAgvzRakHdtdmFiuwZkoz\jnaKwizPijxYnkyjxn\rQaGlnuerqFyUMuTpowv\dgzpqfbBoVjphb\yHbCkwZQRin.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2f1b7b62900f33a31cf597d0b1c16d47_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2f1b7b62900f33a31cf597d0b1c16d47_JaffaCakes118.exe
Resource
win10v2004-20240708-en
General
-
Target
2f1b7b62900f33a31cf597d0b1c16d47_JaffaCakes118
-
Size
120KB
-
MD5
2f1b7b62900f33a31cf597d0b1c16d47
-
SHA1
7a4b2d6d9b67594d3c15ea5018ec89bd736beb04
-
SHA256
32b54700bfe3c0523bfbbd9bee3b9bd8360bc57cd12cbddc0002a87bf8e494ec
-
SHA512
09538c4b88251ad3a08b7db5b48d2a2db8d116251877a9d6bf8d4975174c1aece8d8eefce290c5387fffe1486b66dcc073338e7ddc9e216414daacc1e5b5432c
-
SSDEEP
3072:JUo8G4xUp9HkuCSDGoVVeC3GtEhsSgdP:OWHE7o+F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f1b7b62900f33a31cf597d0b1c16d47_JaffaCakes118
Files
-
2f1b7b62900f33a31cf597d0b1c16d47_JaffaCakes118.exe windows:5 windows x86 arch:x86
9f2c2b697d5f247822a909bbf782c129
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comdlg32
ReplaceTextW
CommDlgExtendedError
GetSaveFileNameW
PrintDlgExW
gdi32
GetStockObject
DPtoLP
ResizePalette
EndPath
PtInRegion
CreateFontIndirectW
EnumFontFamiliesExW
PolyBezier
CreateHatchBrush
RealizePalette
CreateEllipticRgnIndirect
CreatePenIndirect
CreatePen
UnrealizeObject
shlwapi
StrFormatByteSizeA
PathSearchAndQualifyA
ChrCmpIA
StrToIntA
user32
CheckMenuItem
GetMonitorInfoW
GetSubMenu
SetWindowRgn
BringWindowToTop
OpenDesktopW
GetNextDlgGroupItem
AllowSetForegroundWindow
CheckRadioButton
InvalidateRect
SendNotifyMessageW
EnableWindow
GetAsyncKeyState
CharUpperA
SetWindowTextW
HiliteMenuItem
GetSysColorBrush
SetWindowTextA
SetMenuDefaultItem
DrawMenuBar
CopyAcceleratorTableW
GetWindowTextLengthW
GetWindowRect
ScrollWindowEx
AppendMenuW
CreateDialogParamA
GetSystemMenu
ActivateKeyboardLayout
kernel32
GetThreadPriority
HeapAlloc
lstrcmpiW
GetProcessHeap
TerminateThread
SetUnhandledExceptionFilter
FindNextFileW
GetPriorityClass
RaiseException
GetCompressedFileSizeW
GetOverlappedResult
HeapFree
lstrlenW
GetBinaryTypeW
GlobalFindAtomW
GlobalAddAtomW
CopyFileW
CreateThread
Exports
Exports
?vzjfvjf_xbs@@YGPAEPAD@Z
?ZBL___RDRtQ_E@@YGPAFHH@Z
?z_ejZWFQUMGVNK_I@@YGPANI@Z
?T_QSN_BXo_lclB_S@@YGPAIHI@Z
?at_g__jxxmo_S_xm_lc@@YGKD@Z
?TJCJXbs_UVE_WUJPCVZOqp@@YGHDPAD@Z
?GS_CDSLU_JJHXHWj_a@@YGPAMPAI@Z
?__UZOwv@@YGPAXKI@Z
?XSQYKNJDnuxjrm@@YG_NPADE@Z
?At_gidg@@YGHDF@Z
?ljdycJWSOcm@@YGHHN@Z
?nz_BQoTJSYa__l_xwRPK@@YGPAXPAI@Z
?kPWEOHZ____@@YGPAEIPAJ@Z
?bblkZYLAMT_UHUFLQXEO_@@YGPAFJ@Z
?NUBWCmtqvuwvSF_DH_D@@YGXJ@Z
?EEUNZeE_@@YGNE@Z
?TCIXKORDbc___bqimg@@YGXPAIPAK@Z
?PKCI_GNBATRFljn@@YGPADEPAF@Z
?TB_SFWLR_EIWVPSk__@@YGPAEF@Z
?DTYOmua_mpe@@YGPAMF@Z
?cjhz_uc_I_R_@@YGMPAE@Z
?_ghoyZZn_rjs_zcv@@YGPAXPAF@Z
?MWHKT__K__E@@YGPADJPAG@Z
?c_sJZGLPgdmizGl_rnQWQB@@YGIPAF@Z
?HXI__YTErdm@@YGEPAGJ@Z
?I_JFVP__TLHYTCN@@YGK_N@Z
?z__immfR_vh@@YGPAJE@Z
?gwew_k_u_o@@YGMKPAF@Z
?_JCCDKhmg_amh___qitve@@YGNPAM@Z
?_OTEfLT@@YGDF@Z
?uwtrhp_rdwo@@YGHHD@Z
?TC_ucRWFUJrnbonzoyjetm@@YG_NK@Z
?MJ_yznJEoo_emvyu_VR@@YGMMI@Z
?fmo__ftyph@@YGMPA_N@Z
?_djsoPRJMfwuJPMyirv__s@@YGGJPAD@Z
?_veqm_o@@YGJGD@Z
?ABEP_IZ_b_gm_g@@YGFIE@Z
?cmRZ_KERqB_ZUQadrtrLD@@YGPAGPAF@Z
?gualdyoacwjk@@YGJNN@Z
?suxnsCUfakbfldixlePFUQ@@YGJHF@Z
?KIRIzaepfnqv_c_CBHEBD@@YGPAGDN@Z
?t__Lhv_mpYIOQYKE@@YGPAEMF@Z
?G_YCC___SF@@YGPADH@Z
?xtes_cWE@@YGKPAN@Z
?ogatk_xj@@YGX_N@Z
?tttuuGXedonmnPvyiatzt@@YGFPAM@Z
?jc_ixnM_G_NTFOJJTt__m@@YGDPAEPAE@Z
?ac__sfaT_EG@@YGPAXPAH@Z
?_JznQXUPAXFoI_RUKN@@YGPANFPAG@Z
?JJD_BSPE__G@@YGJHM@Z
?_S_UAINSISTNSMm__xp@@YGHI@Z
?ovtjGWWbtgdkb_d@@YGXPADPAG@Z
?kiwTBTKLSQGZ@@YGJPAHF@Z
?_UGBobS__@@YGPAMKPAK@Z
?_ZKxw_tC_TLH_A_CVaP_@@YGGPAD@Z
?l___seg@@YGPAMDD@Z
?zr_gnw__l_d@@YGPA_NPA_N@Z
?zkxpzTRVZOedxpozzc@@YGPAGE@Z
?OAtCLMQCYkttcku_kjyq@@YGXN@Z
Sections
.text Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 25KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 507B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ