E:\OEOOOGSSE\OEWGBZEN.PDB
Static task
static1
Behavioral task
behavioral1
Sample
39602071caec32c196759f4d7cefea0b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
39602071caec32c196759f4d7cefea0b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
39602071caec32c196759f4d7cefea0b_JaffaCakes118
-
Size
492KB
-
MD5
39602071caec32c196759f4d7cefea0b
-
SHA1
548e3137a19c5ef9fc3f9b6e275795223a743f01
-
SHA256
93ae0f2f1b8c6f7c6cfa7909e0927fa6c401f54f07d654c9f00a51416b25a64e
-
SHA512
0349f1c6bda540294c5c1cfbe07b7ccfdccdbfb59e263775bafbb18bce4739aad949fd4966701304601ed02c21ce94f570f834ce4eda063eb60be2331ad11234
-
SSDEEP
12288:kniZJ7XJ49FK7RPLIqGnU1PhEumbyli8+WxUi6+dH8qG:knij769FBq8UtgEi9fq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39602071caec32c196759f4d7cefea0b_JaffaCakes118
Files
-
39602071caec32c196759f4d7cefea0b_JaffaCakes118.exe windows:4 windows x86 arch:x86
8e61bd924c79d019522bd719312918d2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
LoadMenuW
RegisterClassExA
GetGuiResources
ModifyMenuW
SetProcessWindowStation
CharPrevW
EndDialog
RealGetWindowClass
PostQuitMessage
GetActiveWindow
WaitMessage
CreateMDIWindowW
CreateIcon
SetClassLongA
CreateWindowExA
GetParent
RegisterClassA
ShowWindow
MessageBoxA
GetClipCursor
gdi32
DeleteDC
PtVisible
PolyBezierTo
GdiFlush
GetDeviceCaps
CreateCompatibleBitmap
EnumFontsA
ScaleViewportExtEx
GetMiterLimit
CreateDCW
GetFontData
CreateEllipticRgn
GetTextFaceW
GetSystemPaletteUse
CreateBitmap
GetTextCharacterExtra
SelectPalette
GetDeviceGammaRamp
GetTextCharsetInfo
PlayEnhMetaFile
shell32
SHGetPathFromIDListA
ShellAboutW
SHBrowseForFolderA
SHEmptyRecycleBinW
advapi32
LookupAccountSidW
RegOpenKeyExW
CryptDuplicateKey
RegSetKeySecurity
RegReplaceKeyA
LookupPrivilegeValueA
CryptSetProviderExW
comctl32
ImageList_GetImageInfo
CreateStatusWindowA
MakeDragList
ImageList_Merge
DrawStatusTextA
ImageList_Add
ImageList_DragEnter
ImageList_SetImageCount
CreateStatusWindow
ImageList_DragShowNolock
ImageList_SetIconSize
InitCommonControlsEx
ImageList_SetBkColor
ImageList_GetIconSize
ImageList_LoadImageW
ImageList_SetDragCursorImage
CreatePropertySheetPage
ImageList_AddMasked
ImageList_GetImageRect
ImageList_Copy
kernel32
IsValidLocale
DeleteCriticalSection
HeapReAlloc
GetStringTypeA
TlsSetValue
GetCurrentProcessId
TlsGetValue
GetModuleHandleA
GetCurrentProcess
GetStartupInfoA
FindClose
GetCommandLineA
CompareStringA
GetVersion
LCMapStringA
GetLogicalDriveStringsA
InitializeCriticalSection
VirtualAlloc
GetLocaleInfoW
EnumCalendarInfoExW
LCMapStringW
GetSystemTime
IsBadWritePtr
LoadLibraryA
FlushFileBuffers
SetLastError
CloseHandle
TerminateProcess
GetSystemTimeAsFileTime
CreateMutexA
TlsFree
SetHandleCount
GetCurrentThread
InterlockedDecrement
HeapAlloc
VirtualQuery
HeapCreate
UnhandledExceptionFilter
SetStdHandle
EnterCriticalSection
HeapDestroy
GetLocaleInfoA
FreeEnvironmentStringsW
HeapFree
MoveFileW
WideCharToMultiByte
WriteFile
GetEnvironmentStringsW
SetCriticalSectionSpinCount
GetEnvironmentStrings
GetModuleFileNameA
MultiByteToWideChar
RemoveDirectoryA
GetProcAddress
GetLocalTime
GetLastError
GetOEMCP
GetAtomNameA
GetFileType
InterlockedIncrement
SetThreadAffinityMask
GetTickCount
InterlockedExchange
TlsAlloc
VirtualFree
GetTimeZoneInformation
QueryPerformanceCounter
ReadFile
GetACP
GetCPInfo
FreeEnvironmentStringsA
SetFilePointer
OpenMutexA
EnumSystemCodePagesA
GetCurrentThreadId
GetStringTypeW
RtlUnwind
CompareStringW
SetEnvironmentVariableA
GetStdHandle
LeaveCriticalSection
ExitProcess
wininet
InternetReadFile
InternetShowSecurityInfoByURLA
HttpEndRequestA
InternetAlgIdToStringA
InternetOpenA
HttpSendRequestExA
DeleteUrlCacheEntryA
InternetOpenUrlA
Sections
.text Size: 298KB - Virtual size: 298KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 71KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ