d:\okekx.pdb
Static task
static1
Behavioral task
behavioral1
Sample
32e32f8ce00a13a8cf894b83f3cae0c4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
32e32f8ce00a13a8cf894b83f3cae0c4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
32e32f8ce00a13a8cf894b83f3cae0c4_JaffaCakes118
-
Size
400KB
-
MD5
32e32f8ce00a13a8cf894b83f3cae0c4
-
SHA1
6ea59eafd3397545dc97942322a30d6735539fda
-
SHA256
6881529d353ba489092498292f5bb6281c3e05c02f7640396283c908d3956f1f
-
SHA512
1da6a35bf55bc739b83270b9866022495888246cfc885d75d906483f412e227763b7b22ed00e68d348b153607f27db17620f9b337caba48d9951eefeb4de8e16
-
SSDEEP
6144:ngjJ++m+BZYGviGQ9RzP+Nf6cMNOCFLYUnu:nz5+EG8RzPGV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32e32f8ce00a13a8cf894b83f3cae0c4_JaffaCakes118
Files
-
32e32f8ce00a13a8cf894b83f3cae0c4_JaffaCakes118.exe windows:4 windows x86 arch:x86
fcc11898e96148a558aab0541c174798
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
ImageList_LoadImageA
ImageList_DrawIndirect
ImageList_LoadImageW
ImageList_Write
ImageList_LoadImage
ImageList_Merge
ImageList_SetOverlayImage
ImageList_DrawEx
ImageList_SetFilter
ImageList_DragLeave
ImageList_EndDrag
ImageList_DragShowNolock
ImageList_ReplaceIcon
CreateToolbarEx
ImageList_GetImageCount
ImageList_BeginDrag
ImageList_Destroy
ImageList_SetBkColor
InitMUILanguage
DrawStatusTextW
InitCommonControlsEx
CreatePropertySheetPageW
DestroyPropertySheetPage
kernel32
SetConsoleCtrlHandler
GetNamedPipeHandleStateA
GetStartupInfoA
GetCurrentThreadId
FlushFileBuffers
SetLastError
SetConsoleActiveScreenBuffer
GetProfileIntW
SetEnvironmentVariableA
GlobalReAlloc
EnumSystemLocalesA
SetFilePointer
GetCommandLineA
OpenMutexA
EnumCalendarInfoExA
CreateMutexA
GetOEMCP
GetModuleHandleA
HeapReAlloc
GetModuleFileNameA
GetConsoleCP
GetCurrentProcess
SetHandleCount
FlushInstructionCache
GetLogicalDrives
GetCurrencyFormatW
InterlockedExchange
GetTimeFormatA
HeapValidate
GetLastError
GetCPInfo
EnterCriticalSection
WriteFile
SetThreadLocale
FindFirstFileExW
CreateFileA
GetDiskFreeSpaceExA
VirtualQuery
UnhandledExceptionFilter
GetTimeZoneInformation
SetWaitableTimer
WriteConsoleW
HeapLock
GetFileType
LeaveCriticalSection
QueryPerformanceCounter
DeleteCriticalSection
IsValidLocale
GetStringTypeA
CreateSemaphoreW
GetTickCount
WriteConsoleA
DosDateTimeToFileTime
SetStdHandle
GetCalendarInfoA
GetCurrentProcessId
DeleteAtom
GetCurrentThread
Sleep
TlsGetValue
VirtualFree
FreeLibrary
GetConsoleMode
HeapDestroy
GetProcessHeap
SetConsoleMode
ExitProcess
SetCriticalSectionSpinCount
GetProcAddress
HeapAlloc
GetVersionExA
FreeEnvironmentStringsA
TerminateProcess
TlsSetValue
GetEnvironmentStrings
GetUserDefaultLCID
IsValidCodePage
LoadLibraryA
IsDebuggerPresent
InterlockedDecrement
GetDateFormatA
GetACP
RtlUnwind
MultiByteToWideChar
VirtualAlloc
GetLocaleInfoA
CompareStringW
GetStdHandle
GetConsoleOutputCP
InterlockedIncrement
HeapSize
ExitThread
GetSystemTimeAsFileTime
GetFileAttributesExA
WriteProfileSectionW
TlsAlloc
WideCharToMultiByte
GetEnvironmentStringsW
CompareStringA
FreeEnvironmentStringsW
GetProcessShutdownParameters
LCMapStringA
lstrcat
GetLocaleInfoW
ReadFile
SetUnhandledExceptionFilter
CloseHandle
GetStringTypeW
HeapFree
InitializeCriticalSection
HeapCreate
FillConsoleOutputAttribute
TlsFree
ExpandEnvironmentStringsA
GetPrivateProfileSectionNamesW
LCMapStringW
user32
AppendMenuW
LoadMenuIndirectW
GetClientRect
SetWindowRgn
OpenWindowStationW
DispatchMessageA
RegisterClassExA
GetGUIThreadInfo
DdeFreeDataHandle
SetLastErrorEx
CallWindowProcA
IsMenu
GetKeyboardLayoutList
SetCaretBlinkTime
GetScrollInfo
DestroyCaret
MessageBoxW
GetAsyncKeyState
SetScrollRange
DdeSetQualityOfService
CharPrevW
ToAscii
GetWindowLongA
IsWindowVisible
EndTask
GetWindowWord
DdeClientTransaction
PeekMessageW
DrawTextExW
DefWindowProcW
RegisterClassA
SystemParametersInfoW
CharUpperBuffW
InternalGetWindowText
DrawTextA
DdeGetData
EnumDesktopWindows
ShowWindow
DragDetect
DestroyWindow
DdeUninitialize
CreateDialogParamW
ChangeClipboardChain
DrawTextW
FindWindowExW
CreateWindowExW
advapi32
RegEnumKeyW
AbortSystemShutdownW
RegEnumKeyExW
RegQueryMultipleValuesW
LookupSecurityDescriptorPartsA
CryptGetKeyParam
CryptAcquireContextA
CryptImportKey
CryptSetProviderA
CryptDestroyHash
LookupAccountSidW
LogonUserW
CryptSetProvParam
CryptHashData
RegCreateKeyW
CryptGetDefaultProviderA
LookupAccountSidA
CryptHashSessionKey
RegQueryInfoKeyA
RegOpenKeyExW
RegSaveKeyA
AbortSystemShutdownA
RegLoadKeyA
RegSetValueExW
Sections
.text Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ