O:\Nlmzqvrflnth\OKrkFrmpekPc\oFkzziguiv\wprrLRo\xgwstsoRbQHkye.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6a9bbfe09851825470b8b3a940879769_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6a9bbfe09851825470b8b3a940879769_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6a9bbfe09851825470b8b3a940879769_JaffaCakes118
-
Size
211KB
-
MD5
6a9bbfe09851825470b8b3a940879769
-
SHA1
41b36feabb788dd8fef7b74611139e90b62f8e98
-
SHA256
c7fc2951ac3af0dd5cdd5fe083e70eb52a3aaf110b196995597ed1d6c079a1a4
-
SHA512
45d93df81af1bc15591662dbcd63ba0025cdd9dabc10cb654bd2728b669a2c51e5bb97f8c97a449bb04654e6462e20b0dd7b608d20dec0e147883863cdf34a81
-
SSDEEP
6144:ddyfKbWJ/EyD1bgqaxCjDhyhFVToWV3yJj495:ef8WJCqFDoVTos649
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a9bbfe09851825470b8b3a940879769_JaffaCakes118
Files
-
6a9bbfe09851825470b8b3a940879769_JaffaCakes118.exe windows:5 windows x86 arch:x86
77429211c807e1bdc54184cbd4921cf3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
swscanf
_controlfp
__set_app_type
strrchr
mbtowc
__p__fmode
remove
__p__commode
_amsg_exit
_initterm
_acmdln
setvbuf
strncmp
exit
_ismbblead
_XcptFilter
_exit
wcschr
_cexit
__setusermatherr
tolower
__getmainargs
gets
putchar
comctl32
ImageList_GetImageCount
ImageList_ReplaceIcon
ImageList_GetIconSize
ImageList_GetIcon
CreatePropertySheetPageW
gdi32
CreatePolygonRgn
CreateFontIndirectA
CombineRgn
EndDoc
OffsetViewportOrgEx
CreateFontIndirectW
SetViewportOrgEx
SelectPalette
GetObjectW
CreateBitmap
CreateDiscardableBitmap
PatBlt
ScaleWindowExtEx
CreateBitmapIndirect
PtInRegion
advapi32
LookupPrivilegeDisplayNameA
kernel32
GlobalLock
SetSystemTimeAdjustment
GetCurrentDirectoryW
EnumSystemLocalesA
CreateWaitableTimerA
GetFileInformationByHandle
GetFullPathNameA
GetCompressedFileSizeW
SetFileTime
GetOverlappedResult
CancelWaitableTimer
EnumResourceNamesA
SetThreadLocale
DeleteFileA
GetModuleHandleA
lstrcatW
GetFileType
GetUserDefaultUILanguage
user32
UpdateWindow
CharPrevA
PostMessageA
ShowWindowAsync
SystemParametersInfoA
GetClassInfoExW
DestroyIcon
SetWindowLongW
RemoveMenu
IsCharLowerA
RemovePropW
IsCharAlphaW
GetKeyboardLayoutList
LoadStringW
RegisterClassW
SetDlgItemTextA
GetWindow
SetClassLongW
SetFocus
CreateDialogIndirectParamW
DeleteMenu
DrawAnimatedRects
CharLowerBuffW
ShowWindow
GetDlgItemInt
EnableScrollBar
InvalidateRect
GetMonitorInfoW
GetWindowLongA
ChangeMenuW
InflateRect
GetMenuItemInfoW
ModifyMenuW
IsCharUpperA
Exports
Exports
?TryEnterCriticalSectionJKDJHLJHKDljfjhl@@YGKEPA_WG@Z
Sections
.text Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.iadt Size: 512B - Virtual size: 412B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdit Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdgt Size: 512B - Virtual size: 91B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.div Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.up Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.down Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ