c:\ucwjqegqs\seoewc\xlfgcpjehv\wses.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3bd22cb686684724d894c6e4fef35097_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3bd22cb686684724d894c6e4fef35097_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3bd22cb686684724d894c6e4fef35097_JaffaCakes118
-
Size
416KB
-
MD5
3bd22cb686684724d894c6e4fef35097
-
SHA1
66384047f35cf170fe19ce5571539bc78966773c
-
SHA256
a3bb9174534128f8e2d4f53f52b3e4c7d95ec3c4d7e3c40b9389831a48e175ff
-
SHA512
8223f6f096d5778922ea8b37a150a7557510f12189e7ad8ecc27a6da8554a259c66c8051e5ba810a0a7eca686e2a375115ade1acc907826e85a45f07c3f083a3
-
SSDEEP
12288:deL/T7x1/oYaEiHAjo8DTY4PYdZF9Yxwkk9r:dsr7xRjoqYjFqm9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bd22cb686684724d894c6e4fef35097_JaffaCakes118
Files
-
3bd22cb686684724d894c6e4fef35097_JaffaCakes118.exe windows:4 windows x86 arch:x86
199fb887626a798013b2026cd0f84da8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
SystemTimeToFileTime
GetCurrentProcess
WriteFileEx
WideCharToMultiByte
GetStdHandle
GetSystemInfo
EnumResourceNamesW
GetEnvironmentStrings
SetFilePointer
GetModuleFileNameW
GetVersionExA
lstrcpy
FormatMessageW
GetStartupInfoA
GetFileType
InterlockedExchange
OpenEventA
GetSystemTime
GetEnvironmentStringsW
GetOEMCP
ExitProcess
GetProcAddress
GetTickCount
IsBadReadPtr
GetVersionExW
CreateMutexA
GetProcessHeaps
GetProfileSectionW
FreeEnvironmentStringsA
GetTimeZoneInformation
GetModuleFileNameA
SetConsoleTitleW
GetLastError
InitializeCriticalSectionAndSpinCount
EnumTimeFormatsA
GlobalAlloc
GetPrivateProfileSectionA
LocalReAlloc
GetDiskFreeSpaceExA
SetEvent
GetTimeFormatA
HeapSize
VirtualAlloc
GetStartupInfoW
SetLocalTime
CompareStringW
GetProfileStringA
GetUserDefaultLCID
GetModuleHandleA
OpenWaitableTimerA
LCMapStringA
WriteFile
HeapCreate
GetCPInfo
SetThreadAffinityMask
GetPrivateProfileSectionW
LCMapStringW
HeapDestroy
TlsAlloc
VirtualFree
GetLocaleInfoA
QueryPerformanceCounter
GetCommandLineA
TerminateProcess
GetStringTypeW
SetEnvironmentVariableA
SetStdHandle
CompareStringA
InitializeCriticalSection
ConnectNamedPipe
GetStringTypeA
TlsSetValue
EnterCriticalSection
IsBadWritePtr
VirtualQuery
GetPrivateProfileIntW
TlsFree
SetLastError
RtlUnwind
CloseHandle
SetHandleCount
HeapAlloc
CopyFileA
ReadConsoleOutputCharacterA
HeapFree
SetEnvironmentVariableW
FlushFileBuffers
ConvertDefaultLocale
HeapReAlloc
UnhandledExceptionFilter
GetCurrentThread
GetThreadLocale
EnumSystemLocalesA
CommConfigDialogA
VirtualProtect
GetCommandLineW
TlsGetValue
LeaveCriticalSection
ReadFile
GetSystemTimeAsFileTime
OpenEventW
DeleteCriticalSection
MultiByteToWideChar
LocalCompact
IsValidLocale
GetACP
FreeEnvironmentStringsW
SetComputerNameA
OpenMutexA
MoveFileW
GetCurrentProcessId
GetDateFormatA
GetCurrentThreadId
LoadLibraryA
IsValidCodePage
GetLocaleInfoW
user32
SetLastErrorEx
InternalGetWindowText
OpenClipboard
GetClipboardFormatNameW
DrawTextW
DefWindowProcA
RegisterClassExA
IsDialogMessage
SetWindowWord
ShowWindow
BeginPaint
ShowScrollBar
FindWindowW
CreateWindowExA
VkKeyScanA
ShowOwnedPopups
GetMenuBarInfo
RegisterClassA
MessageBoxA
FillRect
GetMenuItemCount
IsDialogMessageA
DestroyWindow
GrayStringW
CallWindowProcW
CharNextW
wininet
InternetGetCertByURL
comctl32
ImageList_DragShowNolock
CreatePropertySheetPageW
ImageList_SetFilter
MakeDragList
ImageList_GetBkColor
ImageList_GetDragImage
InitCommonControlsEx
ImageList_Read
ImageList_Remove
ImageList_SetDragCursorImage
DrawInsert
ImageList_LoadImage
ImageList_Merge
GetEffectiveClientRect
ImageList_Copy
ImageList_SetBkColor
InitMUILanguage
ImageList_SetOverlayImage
DrawStatusTextW
CreateStatusWindow
ImageList_AddIcon
CreatePropertySheetPage
ImageList_DragMove
CreateToolbarEx
ImageList_DrawEx
ImageList_GetImageRect
Sections
.text Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 144KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ