K:\AfLjAOv\FzdwjusgW\hTqwXlDfovr\knctoWoiPGrkb.pdb
Static task
static1
Behavioral task
behavioral1
Sample
944d5868652735089513288484db23f0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
944d5868652735089513288484db23f0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
944d5868652735089513288484db23f0_JaffaCakes118
-
Size
140KB
-
MD5
944d5868652735089513288484db23f0
-
SHA1
d08f33a68614784ccbf7d6cd8c7a8221a504682d
-
SHA256
d1f02a0ae9ecae47b8ea491ed58e322344152771d3eb0a12189e3966b71b0beb
-
SHA512
2c7f6c6cd0d91ff7073788097976374118c3ef7801d22b592fe20419db6035481341530d5f1b0bc35fa4a2b8f035fb408af3ab87ffe1de8ccb48cfcad1eea39c
-
SSDEEP
3072:V25kNO9iJcL3ZIzk+k/3kW5OPsc6Ilnbwye7/:V252OmG3ZIzkY4OXfe7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 944d5868652735089513288484db23f0_JaffaCakes118
Files
-
944d5868652735089513288484db23f0_JaffaCakes118.exe windows:5 windows x86 arch:x86
3b3b782f7ba506fa35e71eb489017c7e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
CreateBitmap
SetBitmapBits
Polyline
TextOutA
GetTextFaceW
StartPage
SelectPalette
CreateRoundRectRgn
CreateDiscardableBitmap
CreateDIBSection
SetTextColor
GetSystemPaletteEntries
comdlg32
GetFileTitleW
ReplaceTextW
shlwapi
StrTrimA
PathRelativePathToW
comctl32
ImageList_Create
ImageList_Read
CreateStatusWindowW
msvcrt
exit
user32
GetWindowTextW
ChangeMenuW
AllowSetForegroundWindow
wsprintfA
GetPropW
InSendMessageEx
DispatchMessageA
PeekMessageA
CharUpperBuffA
EnableScrollBar
EnableMenuItem
DrawFocusRect
SetScrollInfo
SetTimer
GetSystemMenu
SetScrollRange
GetUpdateRect
GetDlgItemTextA
HiliteMenuItem
TrackPopupMenuEx
GetMenuItemInfoW
SetPropW
CopyImage
ScrollWindow
SetUserObjectInformationW
MessageBoxExA
wsprintfW
DestroyCaret
GetKeyboardType
kernel32
GetModuleFileNameA
GlobalAlloc
GetTimeZoneInformation
FreeResource
GetFileTime
GetModuleHandleA
GetComputerNameW
GetCommandLineA
FindClose
GetTickCount
GetWindowsDirectoryA
GetSystemDirectoryA
GetAtomNameW
GetCompressedFileSizeW
GetThreadContext
GetFileAttributesA
Exports
Exports
?w_kd_bde__A_ct__zsc@@UGPAIPAJPAM@Z
Sections
.text Size: 118KB - Virtual size: 207KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 153B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.img1 Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.img2 Size: 512B - Virtual size: 360B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.img3 Size: 512B - Virtual size: 360B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.img4 Size: 512B - Virtual size: 365B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tsc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.itext Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ