P:\yckWmXxvCbshySSRxhWHwG\hWonozciBihmis\zyobuwnccPtyqvYovyJail\RlKuoaSqbLevuMswShoDbv\JQKktBlawsxxkzwnG\zyomfrqcfVctCRhiwK.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5a66d0855eef0007ec48578c3b787a58_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5a66d0855eef0007ec48578c3b787a58_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5a66d0855eef0007ec48578c3b787a58_JaffaCakes118
-
Size
144KB
-
MD5
5a66d0855eef0007ec48578c3b787a58
-
SHA1
4556ff528faa4b3505970c267acbef2e67f32f4a
-
SHA256
bef025f48821328045ee1d3fa3410626a6051b4612333be7bc1a52b999e9428a
-
SHA512
74100d9e4820e87859d170e6dd35bb73ceeaf9e3b5e7856e2fd6d5615cb3368c601d9378a578d8272d19d2855386778f340899f9c2f5f2c3556b3b016b985cda
-
SSDEEP
3072:CsbBNtO8GAlCkFIz5w+10Mqk+U0/B9dbU6DyxtMTPdNBVxU4mb0WD1/e:fBNtJtw5Hf0/zOxeTPzLxjM1/e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a66d0855eef0007ec48578c3b787a58_JaffaCakes118
Files
-
5a66d0855eef0007ec48578c3b787a58_JaffaCakes118.exe windows:5 windows x86 arch:x86
3e3e362287940ef39fbada76cfa7f67f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
PathSearchAndQualifyA
ChrCmpIA
UrlGetPartW
StrToIntA
comctl32
ImageList_GetImageCount
ImageList_Create
ImageList_ReplaceIcon
CreateToolbarEx
comdlg32
ChooseFontW
GetOpenFileNameW
ReplaceTextW
ntdll
memset
user32
BringWindowToTop
SendNotifyMessageW
CreateWindowExW
keybd_event
FillRect
UpdateWindow
SendMessageW
wvsprintfA
GetSubMenu
ReplyMessage
ReleaseDC
DrawFocusRect
DestroyMenu
MapDialogRect
MapVirtualKeyExW
InvertRect
WaitForInputIdle
GetClipCursor
SetRectEmpty
BeginDeferWindowPos
SetDlgItemTextA
LoadCursorA
GetMenuItemID
LoadAcceleratorsA
InvalidateRgn
SetPropW
WaitMessage
GetDlgCtrlID
gdi32
SetPixel
EnumFontsW
CreateBrushIndirect
PolyBezier
CreateDIBitmap
GetCharWidth32W
DPtoLP
GetNearestColor
GetTextExtentPointW
TextOutA
SetStretchBltMode
BitBlt
msvcrt
exit
kernel32
GetFileAttributesExA
VirtualProtect
GetAtomNameW
lstrlenW
FileTimeToDosDateTime
GetOEMCP
MulDiv
GlobalAlloc
SetNamedPipeHandleState
GetCommState
GetCommModemStatus
lstrcpynA
LocalUnlock
IsDBCSLeadByteEx
lstrcmpiW
Exports
Exports
?xqztyn___bqw_xg_p@@YGXEPAH@Z
?Ipch__g@@YGJ_NI@Z
?dEDPQTi_@@YGEPAN@Z
?A__BAJrm_kxv_@@YGXEG@Z
?pdaNMC_G_NJ_UIDAFUVD_@@YGIH@Z
?ueyvavyxlh@@YGHPAF@Z
?zrRL_O_B__UBKBODFk@@YGGE@Z
?__Bi_mX_VXG_Xv_eabt@@YGPA_NKI@Z
?NXNAV_M_p_iPAtw@@YGPAHPAGPAM@Z
?CKABzljFHwzBVkcny_ok@@YGPAJEF@Z
?Axcu_tsdyi_m@@YGPAKM@Z
?GYIRHlzv_cQecystggigy@@YGPANM@Z
?_MBQNXQyFQ_NPJ_ONo@@YGDJPAJ@Z
?Z_GPIP_t_p_ccdlb__rU@@YGPAGI@Z
?M_GGOYODQWT_C@@YGPAJPAD@Z
?LRS_tvnk@@YGXH@Z
?_qlq_r__xIZ_@@YGXH@Z
?FMJPEPR_ddsqjmW@@YG_NHM@Z
?mrodbUNTSRUNE_@@YGGJG@Z
?wsbx_rt_EYJ__YR_jgr_O_@@YGXFK@Z
?biXa_ymsw__ED__HL@@YGDPAM@Z
?_xifnl_t_mZvb_zu_@@YGMIPAD@Z
?_JH_RDGJQOXp_ig@@YGPAGIPAH@Z
?TYNd_w_eKMKJqb___g_hm@@YGJE@Z
?drk_rfkc_jN_@@YGFPAJPAI@Z
?XADXGQACZ__UP@@YGXPAII@Z
?DUUXS_BSYS_su@@YGXPAG@Z
?BThcoammkaswl_xv@@YGEG@Z
?X___USbve@@YGJJE@Z
?GOOKFL_jip@@YGIPAE@Z
?SZPXD_k_qmoEZTMWqxc_Z@@YG_NGPAI@Z
?_cztzVFYGU_m_njbe@@YGGPADM@Z
?jiliVVOYL_@@YGNPAF@Z
?pIZBZOl_qa@@YGDJ@Z
?zRI_RYNQG_K@@YGPAFIPAD@Z
?pCwb_o__x_tqWDxbf@@YGPAIPAFPAM@Z
?xqybl_____l__xwP@@YGGPAEPAD@Z
?_NRigiwz_L_gs@@YGDI@Z
?qtxcF_xEON@@YGDPAH@Z
?PFd_gxbMZHnuwhxn_@@YGPAJJH@Z
?pjcSR_YRXUKM@@YGPAGI@Z
?iw_ycoxdo_swlJEULIw@@YGPAFPAD@Z
?RSSBBkop_nL_V@@YG_NPAE@Z
?_pp_bn_R@@YGPAIH@Z
?__qwUREB_T@@YGHK@Z
?__hngs_gS___Tlrl_x_UF@@YG_NFG@Z
?_bb_hqqUUPOK@@YGPAJE@Z
?q_wsycoiohwn@@YGGPAHPAH@Z
?_Y_Pkn_vJNSIK_tvn_@@YGKDK@Z
Sections
.text Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 189KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 519B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ