K:\aqodyilXahR\aKhbdEqgClZu\Idiljdf\AqYyeJxzspf.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a4437b460ddd1df68ad537ffde24c94b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a4437b460ddd1df68ad537ffde24c94b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a4437b460ddd1df68ad537ffde24c94b_JaffaCakes118
-
Size
214KB
-
MD5
a4437b460ddd1df68ad537ffde24c94b
-
SHA1
04057337f67de422669851cea380ba0117773902
-
SHA256
ee0e1303a95d4b2f983904596b5da7074aaf8d25b00e16d9414b80ae1b02fc0e
-
SHA512
cef6b40e3a6c3bb42bd701768d2b989ec4a1804ffb5873f71107f4a58fbae7a941ace461c752da3d98f2227cd16f432285890323531b25e891e7137e889c7849
-
SSDEEP
6144:rMyhDPBBi56IXVm9u1IdS7k2I5MJWpp8jD+1r4D5EbokiJA:fM6FTY/JWcf+Z4DWboZA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4437b460ddd1df68ad537ffde24c94b_JaffaCakes118
Files
-
a4437b460ddd1df68ad537ffde24c94b_JaffaCakes118.exe windows:5 windows x86 arch:x86
4a49a3023ba92f846f58759d10736e48
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
CharLowerA
GetFocus
GetClassNameW
CharToOemBuffA
SetWindowPlacement
AdjustWindowRect
GetDlgCtrlID
SetClassLongW
GetDC
ValidateRect
CallWindowProcA
GetWindowTextW
PtInRect
SetScrollInfo
GetKeyboardLayoutList
EnumChildWindows
ScreenToClient
InvalidateRgn
LoadImageW
PostThreadMessageA
CharLowerBuffW
AdjustWindowRectEx
PostThreadMessageW
GetWindowTextA
GetClassLongA
GetMenuState
FillRect
SetRect
VkKeyScanW
DefFrameProcA
SetDlgItemTextA
wvsprintfA
TranslateAcceleratorW
GetClassInfoExW
GetForegroundWindow
ReplyMessage
CharUpperA
InvalidateRect
InSendMessage
DeleteMenu
DialogBoxIndirectParamW
CreatePopupMenu
SetDlgItemTextW
GetMenuItemCount
GetUserObjectInformationW
MessageBoxW
FindWindowW
LoadMenuA
LoadIconA
CharUpperW
CallWindowProcW
SetParent
CheckMenuRadioItem
GetLastActivePopup
SetWindowLongA
GetClassInfoExA
ShowCursor
CharPrevA
GetSysColor
CharNextA
CreateWindowExA
LoadMenuW
OffsetRect
LoadIconW
IsWindowEnabled
CopyRect
ModifyMenuW
CharToOemW
ShowWindowAsync
OpenIcon
CreateDialogParamW
SetWindowTextW
DestroyWindow
LoadStringW
SendDlgItemMessageW
GetMenuStringA
IsWindowUnicode
SetWindowTextA
LoadImageA
IsDialogMessageA
SendDlgItemMessageA
CascadeWindows
SetDlgItemInt
keybd_event
GetParent
GetNextDlgGroupItem
SetWindowLongW
SetCursorPos
GetWindowTextLengthW
msvcrt
iswdigit
wcscmp
wcslen
ungetc
strtoul
swprintf
_controlfp
__set_app_type
isupper
fputs
__p__fmode
__p__commode
strncmp
localtime
strncpy
_amsg_exit
printf
tolower
vsprintf
fseek
_initterm
fflush
_acmdln
sscanf
setlocale
getc
exit
setvbuf
_ismbblead
iswprint
strstr
_XcptFilter
realloc
_exit
_cexit
__setusermatherr
iswxdigit
__getmainargs
time
kernel32
VirtualProtect
GlobalAddAtomW
FreeLibrary
GetAtomNameA
GetTickCount
IsBadStringPtrW
GetFileSize
FileTimeToLocalFileTime
FindNextFileA
GetCommModemStatus
VirtualFree
CreateDirectoryA
GetTempPathA
BuildCommDCBAndTimeoutsW
LocalReAlloc
CreateFileW
GetSystemDirectoryW
UnmapViewOfFile
OpenFile
FileTimeToDosDateTime
lstrlenA
SetCommBreak
SetSystemTime
GetPriorityClass
UnhandledExceptionFilter
GetCommTimeouts
GetBinaryTypeW
GlobalFree
SleepEx
SuspendThread
RemoveDirectoryA
SetEndOfFile
ClearCommBreak
GetVersionExW
LoadResource
GetStringTypeExW
TlsSetValue
lstrcpyA
SetCurrentDirectoryA
lstrcatA
CreatePipe
gdi32
CreateDIBitmap
CreateFontIndirectW
CreateFontW
SetTextAlign
WidenPath
TranslateCharsetInfo
SetBitmapDimensionEx
GetDIBits
IntersectClipRect
GetTextMetricsW
CreateDCW
GetTextExtentPointW
CreateFontA
DPtoLP
SetDIBits
SetBkColor
FillRgn
RemoveFontResourceW
GetClipBox
CreateCompatibleBitmap
GetTextExtentExPointW
GetRgnBox
CreateBitmap
ExtTextOutW
CreatePatternBrush
PatBlt
GetROP2
GetTextAlign
SetBrushOrgEx
SetRectRgn
DeleteDC
UnrealizeObject
MoveToEx
GetPixel
GetPaletteEntries
EndPath
GetBkMode
Exports
Exports
?WaitForMultipleObjectsIUIUDSiuld@@YGKEPA_WG@Z
?WaitForMultipleObjectsJUDiuDLIJU@@YGKEPA_WG@Z
?WaitForMultipleObjectsUYDyudkjh@@YGKEPA_WG@Z
?WaitForSingleObjectYDEyuhgDU6d@@YGKEPA_WG@Z
Sections
.text Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ