K:\KqtTmQvZy\SkgYycwaWsf\kqevqclwXc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
42a1c6c08a707b3874f6c226ad5a7fff_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
42a1c6c08a707b3874f6c226ad5a7fff_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42a1c6c08a707b3874f6c226ad5a7fff_JaffaCakes118
-
Size
211KB
-
MD5
42a1c6c08a707b3874f6c226ad5a7fff
-
SHA1
a8cdbf05167f4e32ae4c8db2b49907646753e738
-
SHA256
27c93c19e997bc70f74b967d4ce84636058841867d445e2f06fae742e759be42
-
SHA512
a2e1ed92822b3fa9ceb50ea71de33939d8f958f39b6847bc1b984a1e92965f00896aa0101dac60a1494f79908b4f25be5ace74ac1836ba73027453e153ad6e51
-
SSDEEP
6144:XT7KBS8DwpSsjVq+zuiudEC3AURXNPz2Y8a:xoynzun+4dPyY8a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42a1c6c08a707b3874f6c226ad5a7fff_JaffaCakes118
Files
-
42a1c6c08a707b3874f6c226ad5a7fff_JaffaCakes118.exe windows:5 windows x86 arch:x86
2b994da1f0d645e687e2619725024e14
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
ImageList_Destroy
ImageList_AddMasked
CreateStatusWindowW
gdi32
SetViewportOrgEx
StartDocW
SetAbortProc
CombineRgn
ExtTextOutA
TranslateCharsetInfo
MoveToEx
SetBrushOrgEx
GetBkMode
GetSystemPaletteEntries
GetClipBox
Ellipse
CreateDiscardableBitmap
WidenPath
GetDIBColorTable
SetDIBColorTable
user32
CreateWindowExA
CreateCaret
GetAltTabInfoA
GetSystemMetrics
GetDialogBaseUnits
EnumChildWindows
AllowSetForegroundWindow
GetUpdateRgn
CharToOemW
CreateCursor
ChangeMenuW
ExitWindowsEx
GetDlgCtrlID
GetMonitorInfoW
WindowFromPoint
keybd_event
SetScrollPos
DrawIcon
AppendMenuA
IsCharUpperA
SendMessageA
CharToOemA
GetTopWindow
OpenIcon
OpenInputDesktop
WaitForInputIdle
GetSysColor
GetForegroundWindow
UnloadKeyboardLayout
CheckMenuItem
EndDialog
GetMenu
LookupIconIdFromDirectory
RemovePropW
SetScrollInfo
CharUpperW
DrawTextExW
kernel32
GetSystemDefaultUILanguage
GetSystemDirectoryA
LCMapStringW
CreateFileMappingW
GetLocaleInfoA
WaitForMultipleObjectsEx
SetThreadContext
SetCurrentDirectoryW
IsBadWritePtr
SetSystemTime
SetWaitableTimer
Sleep
CreateSemaphoreA
QueryDosDeviceW
SetLocalTime
lstrlenW
SetPriorityClass
GlobalCompact
ntdll
memcpy
comdlg32
ChooseColorW
CommDlgExtendedError
GetSaveFileNameW
PrintDlgW
Exports
Exports
AlphaBlend
GradientFill
TransparentBlt
?KDFJHjhfuyUFuiuydyufds@@YGKEPA_WG@Z
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.debug Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.build1 Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.build2 Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.build3 Size: 512B - Virtual size: 310B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.memory Size: - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ