H:\NGskdoAdjigkrE\bwwIiiaso\vtAnileqnax\JsIbchDU\glvjcfyDr.pdb
Static task
static1
Behavioral task
behavioral1
Sample
85df5d85ba1a5fdbbd561241ae3d9bc3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
85df5d85ba1a5fdbbd561241ae3d9bc3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
85df5d85ba1a5fdbbd561241ae3d9bc3_JaffaCakes118
-
Size
158KB
-
MD5
85df5d85ba1a5fdbbd561241ae3d9bc3
-
SHA1
3903ac78b81351a09331a39499ad8dac6c934df0
-
SHA256
59d7a8bbf525f202992f6332cf80ad877c5cdd352beb0f3247a17683e0d38a72
-
SHA512
b516d89e01eeda6a45d0571e0e708aa1aa7a9a4b0acab8551f760421d20431a85d28717b97cc2ac247f2dbf3240214eae3dbdfaa74b54a663e5590bfc41c5ab9
-
SSDEEP
3072:Ltw53hweveVRF52C855InS/tooFuwPBMzu6HSCgC:Jw53hweuuC0t/tXnBMS8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85df5d85ba1a5fdbbd561241ae3d9bc3_JaffaCakes118
Files
-
85df5d85ba1a5fdbbd561241ae3d9bc3_JaffaCakes118.exe windows:5 windows x86 arch:x86
97403a9cbc9ae3d759e2ad5f7ae38b7b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
mbstowcs
_controlfp
__set_app_type
__p__fmode
__p__commode
_amsg_exit
rand
_initterm
towlower
_acmdln
fclose
realloc
exit
setlocale
isprint
wcstod
_ismbblead
bsearch
_XcptFilter
wcsrchr
_exit
_cexit
iswalpha
__setusermatherr
iswdigit
isalpha
__getmainargs
shlwapi
StrToIntExA
StrCatBuffA
gdi32
ExcludeClipRect
GetCharWidth32W
Polyline
SetPixel
TextOutW
GetSystemPaletteUse
GetWindowOrgEx
EnumFontFamiliesExW
StartPage
PatBlt
SetWindowExtEx
GetSystemPaletteEntries
CreateDIBSection
PolyBezier
GetTextExtentPointW
LineTo
SetLayout
LineDDA
TranslateCharsetInfo
user32
RegisterClassExA
PostThreadMessageA
EnumThreadWindows
TranslateAcceleratorW
LoadAcceleratorsA
GetMenuItemCount
SendMessageA
SetPropW
SetScrollInfo
MapWindowPoints
ShowCursor
GetSubMenu
GetMonitorInfoW
GetPropW
GetAsyncKeyState
GetDlgItemTextA
DialogBoxParamA
SendMessageTimeoutA
DialogBoxIndirectParamW
AppendMenuA
CharUpperW
SetForegroundWindow
CascadeWindows
keybd_event
AllowSetForegroundWindow
ChildWindowFromPoint
CallWindowProcW
SetMenuItemInfoW
GetWindowTextW
SetWindowRgn
EnumWindows
DialogBoxParamW
PostMessageW
GetMessageTime
AdjustWindowRect
CreateWindowExW
MessageBoxExA
CreateIconFromResource
CreateAcceleratorTableW
SetTimer
FindWindowExA
CharUpperBuffA
ShowOwnedPopups
KillTimer
RegisterWindowMessageA
kernel32
GetTempFileNameW
GlobalAddAtomW
LocalSize
SetFileApisToOEM
HeapReAlloc
SetTimerQueueTimer
GetTickCount
UnmapViewOfFile
lstrcpyW
QueryPerformanceCounter
lstrlenA
IsValidLanguageGroup
GlobalUnlock
ConvertDefaultLocale
GetLocalTime
LoadLibraryW
GetSystemDefaultLangID
CompareStringA
GlobalAddAtomA
GetModuleHandleA
GetFullPathNameA
SetSystemTime
TerminateThread
Exports
Exports
?GenerateFullName@@YGNFEPADE~U
?DeleteMonitorEx@@YGXIMPAGPAM~U
?ExecuteLoaderTrayXBwyGD@@YGKGHE@Z
?InvalidateExpressionEx@@YGFDPAEPAE~U
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ticx Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.kip Size: 1024B - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ticy Size: 512B - Virtual size: 439B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zdata Size: 512B - Virtual size: 228B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.heap Size: - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 129KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ