D:\ierdowlebJluzd\jlkkwdtzs\nHoJlDbi.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8a954a9063655383859bd38298393403_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8a954a9063655383859bd38298393403_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8a954a9063655383859bd38298393403_JaffaCakes118
-
Size
177KB
-
MD5
8a954a9063655383859bd38298393403
-
SHA1
fd44468a7acee37fdc684487edf704ddf3922111
-
SHA256
1cd5a6912e5fd4849848b16e41d12535efd94bf6373458cbe23f919c3bf91e7c
-
SHA512
e1eeec0780586eff81fb86454fca10336979c36ab302ede06cc1327bc32d7bbd420ef0f54011789bcad2e4ea2512f3eb85bae2ede593909ef589c934c9ed70d8
-
SSDEEP
3072:99+fI0NbcZKa4kZJl87tgUyFJNFP/kZB3OJMakzwiSYsYlLqNFZP3Vbuv:eIY/yX872Ug1PUFakRjsYVqBFq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a954a9063655383859bd38298393403_JaffaCakes118
Files
-
8a954a9063655383859bd38298393403_JaffaCakes118.exe windows:5 windows x86 arch:x86
0beb9786f9628b2a824328e981396d8e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comdlg32
ChooseColorW
GetFileTitleW
FindTextW
PrintDlgExW
user32
RegisterClassW
EndPaint
GetMenuStringA
LoadIconW
IsCharAlphaA
ChildWindowFromPoint
GetMonitorInfoW
CheckMenuRadioItem
FindWindowA
RegisterWindowMessageW
TrackPopupMenuEx
IsCharLowerA
GetClientRect
IsCharAlphaW
DrawStateW
ActivateKeyboardLayout
SetForegroundWindow
GetActiveWindow
CharLowerA
EqualRect
EndDialog
GetNextDlgGroupItem
GetSysColor
ReplyMessage
RegisterClassA
InvalidateRgn
SetActiveWindow
SetFocus
IsWindowVisible
AppendMenuW
InternalGetWindowText
SetWindowLongW
ClientToScreen
SendMessageA
GetMenuItemID
SendDlgItemMessageW
GetWindowTextLengthW
FillRect
GetPropW
FindWindowW
RegisterClassExA
CreateCaret
LoadStringW
SendInput
PostMessageA
GetWindowLongW
DefDlgProcA
MessageBoxA
DeleteMenu
LoadCursorW
SetMenuItemBitmaps
GetWindowDC
TranslateAcceleratorA
GetAsyncKeyState
ModifyMenuW
DrawTextA
CreateWindowExW
DestroyMenu
SetWindowTextA
GetWindowPlacement
CharLowerBuffW
SetCursor
GetWindowTextW
DestroyAcceleratorTable
MessageBoxExW
MapVirtualKeyA
wsprintfW
GetSubMenu
IntersectRect
GetWindowLongA
GetSysColorBrush
OemToCharBuffA
SetLastErrorEx
LockWindowUpdate
CopyImage
DrawTextExW
CharUpperBuffW
UnloadKeyboardLayout
DestroyCursor
SetDlgItemInt
GetClassLongA
GetMessageA
MonitorFromPoint
DrawIcon
GetDlgItem
GetParent
DialogBoxIndirectParamA
ToUnicodeEx
CreateMenu
VkKeyScanW
CharPrevA
GetCursorPos
ShowOwnedPopups
AppendMenuA
IsChild
SetCursorPos
SetScrollRange
LoadIconA
ClipCursor
DeferWindowPos
OffsetRect
GetSystemMenu
ChangeMenuW
AdjustWindowRectEx
SetCaretPos
GetLastActivePopup
WindowFromPoint
CharUpperA
SetWindowPos
DrawEdge
DispatchMessageA
SetParent
SetMenuItemInfoW
SetMenu
ExitWindowsEx
keybd_event
CreatePopupMenu
MessageBoxW
CopyAcceleratorTableW
GetSystemMetrics
GetKeyboardLayoutList
shlwapi
UrlGetPartA
msvcrt
strpbrk
iswxdigit
_controlfp
sprintf
vsprintf
strstr
putchar
system
wcstol
setvbuf
wcstok
fflush
__set_app_type
__p__fmode
sscanf
isalnum
toupper
iswdigit
strchr
wcstod
gmtime
__p__commode
wcschr
calloc
_amsg_exit
ftell
mktime
fread
_initterm
strerror
islower
_ismbblead
towlower
isspace
strtoul
_XcptFilter
isupper
swprintf
_exit
_cexit
wcscoll
isprint
__setusermatherr
strcpy
wcscat
strspn
__getmainargs
kernel32
QueryDosDeviceW
CreateEventW
LoadLibraryA
FlushViewOfFile
DeleteFileA
InitializeCriticalSection
CreateFileMappingA
GlobalLock
TerminateThread
CompareStringW
CancelWaitableTimer
GetComputerNameExA
SetSystemTime
RaiseException
lstrcatW
HeapCreate
LCMapStringA
MoveFileW
MapViewOfFile
GetCurrentThreadId
GetFileAttributesExA
FindFirstFileW
ReleaseMutex
HeapUnlock
SizeofResource
ClearCommBreak
GlobalAddAtomW
lstrlenW
FindClose
GlobalHandle
GetLastError
WaitForMultipleObjectsEx
GetModuleFileNameA
LoadLibraryExW
WriteFile
HeapReAlloc
ConnectNamedPipe
TlsGetValue
EnumResourceTypesA
OpenFileMappingA
IsValidLocale
lstrcatA
ConvertDefaultLocale
SetEvent
GetStartupInfoA
FileTimeToSystemTime
GetFileTime
TlsSetValue
CompareStringA
DeleteCriticalSection
GetCommModemStatus
IsDBCSLeadByte
GetModuleHandleA
GlobalUnlock
comctl32
CreatePropertySheetPageA
ImageList_Remove
ImageList_GetIcon
ImageList_Read
PropertySheetW
ImageList_GetImageCount
Exports
Exports
?RedirectOutputMsg@@YGKPBDDKPAX:O
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.cexp Size: 512B - Virtual size: 95B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.regs Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.citab Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.$dbug Size: 512B - Virtual size: 93B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.lime Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tdat Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ