S:\iPTkosvFkBccdm\DEbriBmsvpQch\epwWWCTxa\Lexcduxdixynq.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3b11f9fbbefe3f45edc1f14c6b16e1e9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3b11f9fbbefe3f45edc1f14c6b16e1e9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3b11f9fbbefe3f45edc1f14c6b16e1e9_JaffaCakes118
-
Size
215KB
-
MD5
3b11f9fbbefe3f45edc1f14c6b16e1e9
-
SHA1
d1d9bb85c9c682c15c850dd8deb3f003a821470b
-
SHA256
32c2a3204a7ffe8bfcf2c67bf0ea6626ef0d612fb1a85d482fff090a0308a918
-
SHA512
f42eb17e12678e3fcf6d89cb0c34b42504bd39853914ac351c4edb2c8f63094d4f7f04e083ff6d16f99ebf34c57766ec650dbad37917bc07dcc9184411c95b59
-
SSDEEP
3072:i+4W1beEA9I6+3E2v+9a8+8N3XrnAnRijLbz+/YIEZ5bEOVto:i+4O94+3bIk8N3bnkQ/sXEDrVW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b11f9fbbefe3f45edc1f14c6b16e1e9_JaffaCakes118
Files
-
3b11f9fbbefe3f45edc1f14c6b16e1e9_JaffaCakes118.exe windows:5 windows x86 arch:x86
52ffd28362e3ad869d7f198956fe2f49
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
ToUnicodeEx
AppendMenuA
GetUserObjectInformationW
GetFocus
IsChild
CheckMenuItem
GetMenuCheckMarkDimensions
SendDlgItemMessageW
CreateCursor
GetUpdateRgn
WaitForInputIdle
DrawTextExW
wvsprintfW
SetActiveWindow
GetKeyboardType
UpdateWindow
IsCharAlphaNumericW
CharToOemBuffA
ExitWindowsEx
DrawStateW
DrawIconEx
SwapMouseButton
LoadIconA
GetDC
CharLowerA
RegisterHotKey
EndDialog
LoadIconW
EqualRect
EnumWindows
GetClipCursor
GetMenuItemInfoW
ReplyMessage
GetClassInfoExA
EnableScrollBar
SetWindowTextA
TrackPopupMenuEx
CreateCaret
CreateDialogParamW
GetWindowTextLengthW
SetScrollPos
CreateIconIndirect
GetSubMenu
GrayStringW
FindWindowW
GetDoubleClickTime
GetMenuStringA
CreateAcceleratorTableW
InsertMenuItemW
DispatchMessageA
RegisterClassW
GetSysColorBrush
MapVirtualKeyW
EnumThreadWindows
GetNextDlgGroupItem
DestroyIcon
AdjustWindowRect
LoadImageW
SwitchToThisWindow
InternalGetWindowText
GetWindowLongA
GetMenuItemID
GetWindowTextA
LoadBitmapW
InSendMessageEx
IsWindow
IntersectRect
GetKeyboardLayoutNameW
SendMessageTimeoutA
GetClassLongW
CharToOemA
SetRectEmpty
SetTimer
EnableMenuItem
GetCursorPos
RegisterWindowMessageA
IsCharUpperA
GetDlgCtrlID
GetActiveWindow
ArrangeIconicWindows
PostQuitMessage
SendMessageTimeoutW
GetIconInfo
GetKeyState
wvsprintfA
OemToCharA
SetClassLongW
FillRect
CopyRect
msvcrt
mktime
getc
setlocale
_controlfp
isalpha
towlower
isspace
__set_app_type
fgets
isupper
wcscat
__p__fmode
free
__p__commode
_amsg_exit
clearerr
fprintf
floor
sprintf
srand
mbtowc
strtok
putchar
atol
_initterm
swprintf
gmtime
_acmdln
wcscmp
isprint
exit
_ismbblead
_XcptFilter
_exit
_cexit
vswprintf
__setusermatherr
printf
__getmainargs
gdi32
GetMapMode
Polygon
ExcludeClipRect
DeleteObject
GetNearestColor
GetTextExtentPointA
OffsetViewportOrgEx
GetTextExtentExPointW
ResizePalette
StartPage
EndPath
ScaleWindowExtEx
GetTextMetricsA
ScaleViewportExtEx
ExtTextOutA
EndDoc
SetBrushOrgEx
CreateCompatibleBitmap
GetTextExtentPoint32W
CreateFontIndirectA
DPtoLP
CreateSolidBrush
SetDIBColorTable
CreateBitmapIndirect
CreateDIBSection
Ellipse
SetBkMode
PtInRegion
RemoveFontResourceW
GetPaletteEntries
GetTextExtentPoint32A
CreateHalftonePalette
GetFontData
ExtTextOutW
SelectClipRgn
CreateRectRgnIndirect
PatBlt
GetClipBox
kernel32
FoldStringW
UnlockFile
BuildCommDCBAndTimeoutsW
HeapAlloc
CreateRemoteThread
VerifyVersionInfoW
ClearCommError
GetAtomNameW
CloseHandle
VirtualFree
CreateFileA
SetNamedPipeHandleState
GetWindowsDirectoryA
ReleaseMutex
MoveFileW
GetSystemTime
GetCPInfo
MoveFileExW
GetProcAddress
WaitForMultipleObjects
CreateWaitableTimerW
GlobalFindAtomW
OpenEventW
GetSystemDefaultUILanguage
CallNamedPipeW
CreateNamedPipeA
GetFullPathNameA
FindNextFileA
SetFilePointer
GetOverlappedResult
LoadResource
GetLocalTime
GetCurrentThreadId
GetTimeZoneInformation
SetSystemTime
GetShortPathNameA
GetUserDefaultUILanguage
GetFullPathNameW
GetTempFileNameA
HeapUnlock
CreateSemaphoreW
Exports
Exports
?WaitForMultipleObjectsIUIUDSiuld@@YGKEPA_WG@Z
?WaitForMultipleObjectsJUDiuDLIJU@@YGKEPA_WG@Z
?WaitForMultipleObjectsUYDyudkjh@@YGKEPA_WG@Z
?WaitForSingleObjectYDEyuhgDU6d@@YGKEPA_WG@Z
Sections
.text Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ