f:\xkhonvce.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4ccf10acbb93020edf5129b9fe65cf41_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4ccf10acbb93020edf5129b9fe65cf41_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4ccf10acbb93020edf5129b9fe65cf41_JaffaCakes118
-
Size
700KB
-
MD5
4ccf10acbb93020edf5129b9fe65cf41
-
SHA1
2c015f6d271fb79991a1dbd3035cb133a730f1b5
-
SHA256
711ae0f4149edb94fd3d7176217f52a30bbee987fe3154f3ab21c07a377ba024
-
SHA512
9587bcaf419be728d9105dd32c0c4034807300c2987c4481e41ac505a781e1d8ce7906cfa2587cdc7cfed9285da2ea45f6c84ee4e75f9daa2defe35288ad50c9
-
SSDEEP
12288:aBwK6p7B7doQ/sDrbXBK/ha/iquE5p0uagcQ0BKHJl63yiWE+:aBwK6B7dossDHX/iryHagsKP638
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ccf10acbb93020edf5129b9fe65cf41_JaffaCakes118
Files
-
4ccf10acbb93020edf5129b9fe65cf41_JaffaCakes118.exe windows:4 windows x86 arch:x86
19d7a3265c036a5c77b8410c567208fe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comdlg32
FindTextW
ChooseFontA
advapi32
CryptGetDefaultProviderW
LookupPrivilegeNameW
CryptSetKeyParam
InitiateSystemShutdownW
RegQueryMultipleValuesA
RegEnumValueA
RevertToSelf
CryptGetKeyParam
RegEnumKeyW
LookupPrivilegeDisplayNameA
RegQueryInfoKeyW
CreateServiceA
CryptSetProviderW
InitiateSystemShutdownA
LookupSecurityDescriptorPartsA
CryptSetProviderA
RegDeleteKeyA
LookupPrivilegeValueW
CryptGetHashParam
RegRestoreKeyA
RegCreateKeyW
RegOpenKeyA
CryptDestroyHash
CreateServiceW
RegSetValueExW
gdi32
PtVisible
RealizePalette
GetObjectType
ModifyWorldTransform
GetDCOrgEx
SelectClipRgn
DeleteObject
GetMetaFileW
GetEnhMetaFileHeader
CreateFontA
GetTextMetricsW
DeleteMetaFile
OffsetClipRgn
GetFontData
SetTextJustification
CreateFontIndirectW
SetICMProfileW
CreateRoundRectRgn
FrameRgn
GetObjectW
comctl32
InitCommonControlsEx
ImageList_Duplicate
DrawStatusTextA
ImageList_Remove
ImageList_SetFlags
MakeDragList
ImageList_GetBkColor
CreatePropertySheetPageA
ImageList_Add
ImageList_SetIconSize
ImageList_Read
ImageList_SetDragCursorImage
CreatePropertySheetPageW
ImageList_Merge
ImageList_Destroy
CreateUpDownControl
ImageList_GetImageInfo
ImageList_EndDrag
ImageList_Write
user32
GetScrollInfo
GetKeyNameTextA
SetMenuItemBitmaps
GetKeyState
ShowWindow
RegisterClassA
DefWindowProcA
MessageBoxA
CreateCursor
GetUserObjectInformationA
EndPaint
GetProcessWindowStation
RealGetWindowClass
DdeCreateDataHandle
RemovePropW
CreateWindowExW
ChangeDisplaySettingsExW
GetForegroundWindow
DestroyWindow
DdeDisconnectList
ShowScrollBar
LoadImageA
CascadeChildWindows
RegisterClassExA
LoadImageW
GetMenuInfo
ChangeDisplaySettingsA
SetDlgItemTextW
SetSysColors
CopyAcceleratorTableW
GetKeyNameTextW
ScrollDC
IsCharAlphaNumericW
CharUpperA
PostMessageW
kernel32
LCMapStringW
LoadLibraryA
GetUserDefaultLCID
GetCurrentThreadId
VirtualFree
TerminateProcess
GetOEMCP
HeapAlloc
GetACP
MultiByteToWideChar
TlsAlloc
GetLocaleInfoA
InterlockedExchange
GetConsoleTitleA
GetProcAddress
HeapReAlloc
FlushFileBuffers
QueryPerformanceCounter
EnumSystemLocalesA
VirtualProtectEx
TlsSetValue
UnhandledExceptionFilter
GetCurrentProcessId
FreeEnvironmentStringsA
CompareStringW
GetThreadTimes
HeapCreate
VirtualQuery
GetModuleHandleA
HeapDestroy
GetEnvironmentStringsW
ReadFile
OpenMutexA
GetSystemTimeAsFileTime
WideCharToMultiByte
GetStringTypeA
VirtualProtect
RtlUnwind
IsBadWritePtr
InitializeCriticalSection
CompareStringA
GetCPInfo
GetTimeFormatA
FreeEnvironmentStringsW
SetStdHandle
GetStringTypeW
ExitProcess
HeapSize
GetTimeZoneInformation
SetHandleCount
DeleteCriticalSection
GetFileType
SetFilePointer
GetVersionExA
EnterCriticalSection
GetStartupInfoA
WriteFile
GetLocaleInfoW
LeaveCriticalSection
CreateMutexA
SetLastError
SetEnvironmentVariableA
GetDateFormatA
GetEnvironmentStrings
VirtualAlloc
IsValidCodePage
IsValidLocale
GetCurrentProcess
GetTickCount
HeapFree
GetCommandLineA
GetCurrentThread
CloseHandle
TlsGetValue
LCMapStringA
GetModuleFileNameA
TlsFree
GetSystemInfo
GetLastError
GetStdHandle
wininet
InternetSecurityProtocolToStringA
FindFirstUrlCacheEntryExW
SetUrlCacheEntryInfoW
InternetCanonicalizeUrlW
FindFirstUrlCacheGroup
Sections
.text Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 392KB - Virtual size: 391KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ