f:\eqnxef\zleooejnon\obesbc\rbjv\zraajoo\spko.pdb
Static task
static1
Behavioral task
behavioral1
Sample
42da9ce60ddf6bf890e86a4c8a2759fb_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
42da9ce60ddf6bf890e86a4c8a2759fb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42da9ce60ddf6bf890e86a4c8a2759fb_JaffaCakes118
-
Size
755KB
-
MD5
42da9ce60ddf6bf890e86a4c8a2759fb
-
SHA1
665bf60ebb1b43688637b2fe90b4ecc5ecd8ea06
-
SHA256
d7971412507d8e1733974a0930d87113dc64ea9cb4f60798357f7091ebb250a2
-
SHA512
752fc699be36a9bdff5666357e630b44bba303990f2444804d85f01f714bbc9269882f5951abe0fbc7af84682c1c6891dfed9ccede1afabf031e648a85a7dbb8
-
SSDEEP
12288:jnKLWqLuvgQzbFbWHSi9DrGS69xxZZAwFvcVOqnVy0d:jKLPuvgUFbWHSihqxxZ6wtnKV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42da9ce60ddf6bf890e86a4c8a2759fb_JaffaCakes118
Files
-
42da9ce60ddf6bf890e86a4c8a2759fb_JaffaCakes118.exe windows:4 windows x86 arch:x86
7c98b1c57d7a1e3e8d95b456888e621d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shell32
ShellExecuteExW
InternalExtractIconListW
SheChangeDirExW
SHGetSettings
SHChangeNotify
wininet
IsUrlCacheEntryExpiredW
InternetSetOptionExA
SetUrlCacheConfigInfoW
InternetCrackUrlA
InternetCanonicalizeUrlW
GopherCreateLocatorW
HttpAddRequestHeadersW
user32
TranslateMDISysAccel
RemoveMenu
DrawTextA
DdeDisconnectList
MessageBoxW
IsChild
EnumDisplayMonitors
SetClassLongW
DestroyWindow
CreateCursor
DdeClientTransaction
DdeQueryConvInfo
UnhookWinEvent
DialogBoxIndirectParamW
LoadStringA
GetDialogBaseUnits
SetLastErrorEx
GetKeyboardLayoutList
EnumPropsExW
ShowWindow
RegisterClassExA
ClientToScreen
GetTabbedTextExtentA
DdeQueryNextServer
GetMonitorInfoW
DdeUnaccessData
GetUserObjectInformationA
SetClipboardData
RegisterClassA
InternalGetWindowText
CreateWindowExA
VkKeyScanA
DefWindowProcA
AdjustWindowRectEx
IsCharAlphaNumericA
DestroyMenu
CharUpperBuffA
MenuItemFromPoint
ReleaseCapture
MapVirtualKeyA
OpenDesktopW
MonitorFromRect
DragObject
gdi32
CloseMetaFile
LPtoDP
SetArcDirection
CreateEllipticRgn
GetTextFaceW
CreateSolidBrush
CreateRectRgnIndirect
kernel32
CreateMutexA
QueryPerformanceCounter
GetCommandLineW
FlushFileBuffers
GetTempFileNameW
TlsGetValue
FlushConsoleInputBuffer
SetHandleCount
GetCPInfo
ReadConsoleOutputCharacterA
MultiByteToWideChar
GetModuleHandleA
SetStdHandle
ReadFile
LCMapStringW
VirtualFree
VirtualQuery
lstrcpyn
SetConsoleCP
GetCommandLineA
GetTickCount
CreateFileA
ReadConsoleOutputW
HeapFree
GetStringTypeW
OpenMutexA
OpenWaitableTimerA
GetModuleFileNameW
SetFilePointer
GetStartupInfoW
CreateSemaphoreA
TerminateProcess
ExitProcess
GetSystemTime
GetEnvironmentStringsW
WriteFile
SetEnvironmentVariableA
TlsAlloc
GetStartupInfoA
GetLocalTime
GetThreadSelectorEntry
FreeEnvironmentStringsW
CopyFileExA
HeapCreate
GetCurrentProcess
RemoveDirectoryW
GetVersion
GetFileType
EnumSystemCodePagesA
LCMapStringA
GetCurrentProcessId
LoadLibraryA
HeapAlloc
GetLastError
IsBadWritePtr
LeaveCriticalSection
GetTimeZoneInformation
HeapDestroy
WideCharToMultiByte
GetCurrentThreadId
GetStringTypeA
GetProcAddress
DeleteCriticalSection
CompareStringA
GetVersionExA
GetSystemTimeAsFileTime
CreateDirectoryExA
SetEnvironmentVariableW
GetStdHandle
GetCurrentThread
TlsFree
VirtualFreeEx
GetAtomNameA
GetTimeFormatW
CompareStringW
GetEnvironmentStrings
FreeEnvironmentStringsA
InterlockedDecrement
CloseHandle
VirtualAlloc
InitializeCriticalSection
CreateMailslotW
SetVolumeLabelW
UnhandledExceptionFilter
SystemTimeToTzSpecificLocalTime
InterlockedExchange
HeapReAlloc
TlsSetValue
EnterCriticalSection
FindResourceA
InterlockedIncrement
RtlUnwind
SetLastError
GetModuleFileNameA
GetDiskFreeSpaceA
comdlg32
ChooseFontA
GetSaveFileNameW
FindTextA
comctl32
InitCommonControlsEx
ImageList_AddIcon
Sections
.text Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 452KB - Virtual size: 451KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 129KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ