d:\eevqkneo\ysmfodaas\weyoeyot.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3ce15ef2d6adc065611b462d9a2b9e55_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3ce15ef2d6adc065611b462d9a2b9e55_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3ce15ef2d6adc065611b462d9a2b9e55_JaffaCakes118
-
Size
316KB
-
MD5
3ce15ef2d6adc065611b462d9a2b9e55
-
SHA1
1664ddf19129d9f887e7befa9a6d1f3567dc252e
-
SHA256
286b99b5ae9d022c56f629efef6646f6b04a5f7fb95667d54b2a78352c49c3d0
-
SHA512
9529d17272cbb90af7e93c1a93c8c6d58d98caf0de7edc70e1f89ed2237a06d23078010011dcf287857c7096d97556d51ee5337821362db15b7deb973194fa0f
-
SSDEEP
6144:+HHBzlCq/U4SkkyoZN0/ScWofEqKgR7+cVR1SIXV2F816MtlSM:+pR84SkkFskoXFhDVRoqVaAtl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ce15ef2d6adc065611b462d9a2b9e55_JaffaCakes118
Files
-
3ce15ef2d6adc065611b462d9a2b9e55_JaffaCakes118.exe windows:4 windows x86 arch:x86
e3330fe1ad43d71b3d5d7e66370bbf72
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
GetSystemMenu
CreateWindowExA
OpenIcon
GetClipboardOwner
ChangeDisplaySettingsA
GetMenuState
ValidateRect
EnumPropsExW
OpenClipboard
PostQuitMessage
CreateDialogParamW
GetKeyboardType
DefWindowProcA
SetWinEventHook
OemToCharA
MessageBoxExW
LoadIconA
MessageBoxW
FreeDDElParam
GetMessageTime
wvsprintfA
EndDeferWindowPos
SetMenuItemInfoW
ShowWindow
BeginDeferWindowPos
SendMessageA
DdeGetLastError
IsCharLowerA
ExcludeUpdateRgn
DestroyWindow
MessageBoxA
VkKeyScanExA
SetMenuItemInfoA
RegisterClassExA
DdeFreeDataHandle
UnregisterClassA
RegisterClassA
CharNextA
SetCaretBlinkTime
comdlg32
PrintDlgA
GetOpenFileNameW
comctl32
DrawInsert
ImageList_DrawEx
MakeDragList
ImageList_DragMove
ImageList_DragLeave
CreateStatusWindow
CreatePropertySheetPageA
ImageList_Read
CreatePropertySheetPage
CreateStatusWindowW
_TrackMouseEvent
ImageList_Write
InitCommonControlsEx
DrawStatusTextW
DestroyPropertySheetPage
ImageList_Merge
ImageList_Draw
CreateStatusWindowA
ImageList_Copy
kernel32
GetStringTypeW
QueryPerformanceCounter
SetSystemTime
EnterCriticalSection
GetTickCount
SetConsoleWindowInfo
HeapFree
LCMapStringA
GetACP
InterlockedDecrement
DeleteCriticalSection
SetFilePointer
GetOEMCP
SetLastError
GetCurrentProcessId
GetEnvironmentStrings
TlsGetValue
CloseHandle
GetCurrentThreadId
GetProcAddress
GetSystemTime
InterlockedExchange
CreateMutexA
CompareStringA
TerminateProcess
GetCalendarInfoA
ReadFile
InitializeCriticalSection
DebugBreak
VirtualQuery
TlsAlloc
HeapAlloc
GetPrivateProfileSectionNamesA
VirtualFree
OpenMutexA
GetCurrentProcess
ReadConsoleInputW
RtlUnwind
MapViewOfFile
CompareStringW
GetStartupInfoA
GetSystemTimeAsFileTime
SetThreadLocale
HeapReAlloc
GetCurrentThread
GetLastError
SetEnvironmentVariableA
LCMapStringW
GetModuleFileNameA
SetStdHandle
FindNextFileA
LeaveCriticalSection
GetCPInfo
UnhandledExceptionFilter
HeapCreate
VirtualAlloc
GetStdHandle
GetVersion
TlsFree
TlsSetValue
GlobalGetAtomNameA
IsBadWritePtr
GetCommandLineA
InterlockedIncrement
WriteFile
LoadLibraryA
GetStringTypeA
WideCharToMultiByte
ExitProcess
GetTimeZoneInformation
GetLocalTime
SetHandleCount
HeapDestroy
FlushFileBuffers
MultiByteToWideChar
GetEnvironmentStringsW
GetFileType
GetModuleHandleA
FreeEnvironmentStringsW
FreeEnvironmentStringsA
Sections
.text Size: 136KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ