S:\OASXLlazq\ejKvhrOxGRbucA\wqExxXaquozo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
781e7697b50116817256ffb1756cba61_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
781e7697b50116817256ffb1756cba61_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
781e7697b50116817256ffb1756cba61_JaffaCakes118
-
Size
255KB
-
MD5
781e7697b50116817256ffb1756cba61
-
SHA1
7e551b45d1aa0c63ae8bb2a587823d6cdcaa94a4
-
SHA256
aaddc403704786f8fdaf116111e27af0b0ec8d64fdb2388bbd0f13db02abd93c
-
SHA512
07ccdb5c8a4736eb6c53b7824283e4c6983d5c6afd44c18deec689392436dba92585e767d2fc66f03a12a16345d8d143b2937c02eafb8e7749250dcc5c611c48
-
SSDEEP
6144:Vodom+GhAKy+1VFCK31KTlwz5PP5XxobkHqsY1:ydompAU1KK314lwjxdH3Y1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 781e7697b50116817256ffb1756cba61_JaffaCakes118
Files
-
781e7697b50116817256ffb1756cba61_JaffaCakes118.exe windows:5 windows x86 arch:x86
47f4cf7472afbf39c3614d313f4a3a40
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
CreateStatusWindowW
DestroyPropertySheetPage
ImageList_Remove
PropertySheetW
ImageList_LoadImageW
ImageList_AddMasked
msvcrt
isdigit
atoi
mbtowc
fseek
wcsncpy
strerror
_controlfp
fgetc
wcsstr
bsearch
srand
puts
fputs
__set_app_type
sscanf
strtok
isupper
__p__fmode
__p__commode
wcstol
setlocale
wcspbrk
_amsg_exit
_initterm
_ismbblead
memset
gmtime
wcsrchr
system
strchr
_XcptFilter
_exit
wcscpy
perror
wcstombs
isalpha
free
iswctype
towupper
strtoul
getenv
_cexit
vsprintf
iswalpha
printf
__setusermatherr
setvbuf
__getmainargs
user32
DestroyAcceleratorTable
SystemParametersInfoA
UnloadKeyboardLayout
TrackPopupMenu
GetForegroundWindow
GetMenuItemInfoW
OemToCharA
VkKeyScanA
SystemParametersInfoW
IsDialogMessageA
SetDlgItemTextA
CheckRadioButton
GetCursorPos
DefWindowProcA
SetScrollInfo
DialogBoxIndirectParamW
CharNextExA
GetSysColor
DefFrameProcW
IsCharAlphaNumericW
CharLowerW
CheckMenuItem
SendDlgItemMessageW
WaitForInputIdle
SetForegroundWindow
DrawTextW
InvalidateRgn
GetMessageA
ExitWindowsEx
DragObject
GetClipCursor
GetWindowPlacement
DrawStateW
CreateIconIndirect
AllowSetForegroundWindow
IsWindowEnabled
SetClassLongW
RegisterWindowMessageW
EnableMenuItem
CascadeWindows
GetMenuItemID
CharUpperBuffA
IsWindowVisible
TranslateMessage
DispatchMessageW
InsertMenuA
GetAsyncKeyState
EnumChildWindows
DestroyWindow
GetSysColorBrush
GetMenuItemCount
GetFocus
ShowWindow
AdjustWindowRect
GetSubMenu
SetScrollPos
GetDCEx
InsertMenuW
MapVirtualKeyExW
UpdateWindow
TranslateAcceleratorW
CharNextW
ShowScrollBar
SetMenuDefaultItem
LookupIconIdFromDirectory
KillTimer
RegisterClassW
GetMenuStringW
DispatchMessageA
GetSystemMenu
CreatePopupMenu
CharUpperBuffW
GetParent
PostMessageW
DefDlgProcW
GetWindowLongW
SendDlgItemMessageA
GetWindowTextLengthW
DefDlgProcA
GetSystemMetrics
SetCursor
CreateDialogParamW
GetClassInfoA
EqualRect
LoadBitmapW
LoadIconW
SetDlgItemInt
TileWindows
TabbedTextOutW
DefWindowProcW
SetWindowTextA
DrawEdge
GetKeyboardLayoutNameW
SendMessageW
AppendMenuA
InternalGetWindowText
GetClassInfoW
GetKeyNameTextW
IsCharAlphaA
MessageBoxExW
DestroyMenu
TrackPopupMenuEx
SendMessageTimeoutW
GetDlgItem
MapDialogRect
IsIconic
GetDialogBaseUnits
AppendMenuW
InflateRect
SendMessageTimeoutA
DrawTextExW
ClientToScreen
DrawFrameControl
IsCharLowerA
SetSysColors
ArrangeIconicWindows
GetCaretPos
CharNextA
DrawMenuBar
SetParent
kernel32
GetBinaryTypeW
IsValidLanguageGroup
CompareStringA
QueryDosDeviceW
CreateThread
GetCommProperties
GetAtomNameW
ResetEvent
IsBadWritePtr
LocalAlloc
GlobalGetAtomNameA
DeleteFileA
ResumeThread
FlushViewOfFile
GetAtomNameA
SetErrorMode
GetOEMCP
GetComputerNameA
MoveFileA
GetTickCount
FileTimeToSystemTime
SetLocalTime
EnterCriticalSection
SetCommBreak
GetStringTypeExW
QueryPerformanceCounter
GetProcAddress
HeapSize
lstrlenA
ConvertDefaultLocale
GetModuleFileNameA
lstrcpynW
LocalUnlock
FormatMessageW
SetThreadExecutionState
CreateMailslotW
ClearCommBreak
IsDBCSLeadByteEx
SearchPathW
SetupComm
VerifyVersionInfoW
MapViewOfFile
lstrcatW
EscapeCommFunction
FindResourceA
WaitForSingleObject
SetSystemTime
VirtualAlloc
AddAtomW
GetSystemDefaultUILanguage
GlobalMemoryStatusEx
GetACP
SetFileAttributesA
CreateFileW
GetLocaleInfoA
VerSetConditionMask
gdi32
OffsetRgn
GetClipBox
SaveDC
GetTextExtentPointW
EndPath
GetTextCharsetInfo
CombineRgn
ExtFloodFill
OffsetViewportOrgEx
CreateFontA
CreateBitmap
GetTextExtentPoint32W
SetDIBits
CreateBrushIndirect
EnumFontFamiliesExW
EndPage
Rectangle
SetDIBColorTable
CreateICW
GetDIBits
GetSystemPaletteUse
SetDIBitsToDevice
GetStockObject
PathToRegion
GetTextAlign
SetMapMode
GetTextExtentExPointW
GetDeviceCaps
GetViewportOrgEx
PatBlt
SetBitmapBits
StartPage
RestoreDC
SetBkColor
GetTextFaceW
FillRgn
GetTextExtentPoint32A
LPtoDP
GetSystemPaletteEntries
BeginPath
SetViewportOrgEx
SetStretchBltMode
GetCurrentObject
DeleteObject
EnumFontsW
DPtoLP
SetTextAlign
GetTextMetricsW
GetBkMode
MoveToEx
Exports
Exports
?ForceTriangulateA@@YGKDDPAX:O
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reat Size: 512B - Virtual size: 121B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.uac Size: 1KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.riat Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.byte Size: 512B - Virtual size: 468B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vdata Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 218KB - Virtual size: 218KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ