W:\hhTzvgzRpdEpfxlzlczakx\uyzNarEjFUFhbi\HbPuVaucxyomdibyh\CkoFbcbaxuuqf\qzoAmxfcTeWRKds\ECHySevxcoqIxekXNmEkWM\OqlwAHhaqchbbgCZlf\arCIlTNrLDOMslYl.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3fae584f51a74146cb4e4d9f239c1dba_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3fae584f51a74146cb4e4d9f239c1dba_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3fae584f51a74146cb4e4d9f239c1dba_JaffaCakes118
-
Size
54KB
-
MD5
3fae584f51a74146cb4e4d9f239c1dba
-
SHA1
6ae7f1e2cad8dd487be9fa43bbef40aa242f115c
-
SHA256
e4583862f87549f20716984c3c651a26afc1308662df8c56bb9594138859a5fb
-
SHA512
24d924053222945b143c1ab5bea17c5ddaf6fd2b84e200ce141f8da7046b9c2f003721d378413f00f33c8349ffc505d0eadde253b6a0cc53ec9cfaaee3f4b478
-
SSDEEP
768:JJU4kDrN3I6HgkfS69q06HvEVrfgVchP25NYvJc7eOBZPNryXkSsyLCTX:fU4kD5RgxSrq8Vr48kyF4NryXXsyk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fae584f51a74146cb4e4d9f239c1dba_JaffaCakes118
Files
-
3fae584f51a74146cb4e4d9f239c1dba_JaffaCakes118.exe windows:5 windows x86 arch:x86
368055dc8234d3f3fbda5b068c4c1885
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
PathSearchAndQualifyA
StrToIntA
ChrCmpIA
gdi32
DeleteObject
StretchDIBits
CreatePenIndirect
CreatePen
Polygon
TextOutW
GetCharWidth32W
SetStretchBltMode
RectVisible
UnrealizeObject
GetDIBColorTable
CreateFontIndirectW
CreateBitmap
user32
CopyAcceleratorTableW
SetDlgItemInt
wvsprintfA
EndDialog
GetNextDlgTabItem
CreateCaret
ShowWindowAsync
PostThreadMessageW
ChangeMenuW
GetMenuState
FindWindowW
AppendMenuW
HiliteMenuItem
ToUnicodeEx
GetCursorPos
GetSubMenu
UnionRect
GetPropW
keybd_event
LoadMenuA
TranslateAcceleratorW
GetClassNameW
DefFrameProcW
DialogBoxParamA
DefFrameProcA
GetWindowTextW
ShowOwnedPopups
SetWindowTextA
GetMessageTime
LoadImageW
msvcrt
exit
comdlg32
ChooseFontW
FindTextW
GetFileTitleW
GetOpenFileNameW
kernel32
GetComputerNameA
GetPriorityClass
SearchPathA
GlobalDeleteAtom
CreateWaitableTimerW
lstrcatA
GetShortPathNameA
SizeofResource
CreateNamedPipeA
GetCurrentThread
lstrlenW
GetAtomNameW
lstrcmpiW
CreateNamedPipeW
TlsGetValue
GlobalMemoryStatusEx
GetSystemDefaultUILanguage
Exports
Exports
?___UL__P_EP@@YGXKPAF@Z
?ZUYyaRM_EOC@@YGKK@Z
?xom__pyJ_AS@@YG_NHPAD@Z
?v_orFK__M_LM_@@YGXPAHF@Z
?fib_eT_FIkz_O_I_A@@YGKPAHM@Z
?XIV_NPC_wb@@YGPADHPAG@Z
?_J_bqRHUPG_S_DU_G@@YGGPAJH@Z
?Iu_mipHKVMw_np@@YGPAXPAD@Z
?YUI_VXDjee@@YGPADJ@Z
?_z_lK_xQ__QMiOUUYFih@@YGPAHK@Z
?ZOPGPbk_j@@YGPADKJ@Z
?D_QPxb_@@YGPAXF@Z
?JLeu_xnerxsjcEhHWF@@YGIPADPAE@Z
?mooEORGBTMLTK_MTpnfcTQ@@YGIFF@Z
?pklgzujgaa_patcg_Z@@YGPAXGPAK@Z
?ow_ex_ufaglv_wz__te@@YGIPAGPAI@Z
?BT_kSDABMOf@@YGIJF@Z
?ZsMRA_KMtsag@@YGPAE_NI@Z
?IVDX_KTA_JIIcn@@YGPANPAI@Z
?W_GVUAnewsbCGA@@YGNM@Z
?cauYY_G__EJj__k_VZo@@YGPA_NIPAH@Z
?_zhrkGF_YMCgdg@@YGPAMPAIM@Z
?__ha__hsqAYLPc_v_vj@@YGPADPAMH@Z
?kb_sx_U__RZUP_RgV@@YG_NIJ@Z
?_zj_jgpeaj@@YGPAKEPAJ@Z
?yezPGX_@@YGPAXPAEN@Z
?_bOJU_i_DDWGQGXy@@YGGD@Z
?AH_QiwBR_HC_QVERN@@YGII@Z
?EXIEPHQQ_TWE_FXr__@@YGIH@Z
?TGEUiylg_MOYROrx_rfpKN@@YGMF@Z
?JAEMHbtkikydvxklC_ulf@@YGPAJPAM@Z
?V_p_o_wXZTMVLWO__nrfu@@YGJI@Z
?HWhbi__GGWS_syn__@@YGFPAME@Z
?BZ_USGa_o___jmywufx@@YGPAXKF@Z
?SUXUDJfLZPQ_CCXS_Gnw@@YGPAGMH@Z
?YQLSV___wd_clvk@@YGJPAJPAD@Z
?g__o__phISL_JY_LYNNa_@@YGXIPAJ@Z
?HNAQPEAn_z__auiumu@@YGXPAEPAM@Z
?fmrugg_@@YGGEK@Z
?vl__kk__nfpr___thx_z@@YGPAEPAFM@Z
?srxqHNEZ_VR_WS_Xfpw__@@YGGDG@Z
?_maf_a_ZEE@@YGPAFDD@Z
?FMMXbUYENL@@YGNPAJ@Z
?tpIHEXGwjfemm@@YGFPAEPAD@Z
?_tvakkD_gs@@YGXPAEH@Z
?i_dob_m@@YGXEPAJ@Z
?j_qgt_AH@@YGPADF@Z
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ