e:\emvdrjwe\woipep.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a786d93050170c5cfcf2e39e93830b24_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a786d93050170c5cfcf2e39e93830b24_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a786d93050170c5cfcf2e39e93830b24_JaffaCakes118
-
Size
538KB
-
MD5
a786d93050170c5cfcf2e39e93830b24
-
SHA1
9217bcf305f44c06881ec9d13df6d3535a53df57
-
SHA256
a42260aca2d286f35a173daec3dafce160f51218a4bbf5554353f042322e4a7d
-
SHA512
a0f93ef9036a0a668f466978d89e6a25690a0dea4202bbf5ad0c94b68e86b2ea91d54173a336b7cf9a49893ab3d21f891a6c23d27e34c1277813b65a5d570676
-
SSDEEP
12288:Watc7CkJAihsX1wYyQlf8OfkNrrzodGwbwa+9pd:OCkJADf8mEodG8u9pd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a786d93050170c5cfcf2e39e93830b24_JaffaCakes118
Files
-
a786d93050170c5cfcf2e39e93830b24_JaffaCakes118.exe windows:4 windows x86 arch:x86
9fcd86f2d4f2ef9313f37702473aaf07
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
ImageList_GetIconSize
CreateStatusWindowA
CreateStatusWindowW
ImageList_SetFilter
ImageList_BeginDrag
ImageList_LoadImageW
DrawInsert
ImageList_GetBkColor
CreateToolbarEx
ImageList_DrawEx
ImageList_Create
ImageList_Draw
ImageList_Add
ImageList_SetFlags
ImageList_SetBkColor
ImageList_LoadImage
ImageList_Read
InitCommonControlsEx
CreatePropertySheetPage
user32
RegisterClassA
SetWindowPlacement
MonitorFromPoint
DdeDisconnect
MapVirtualKeyExA
ExcludeUpdateRgn
RegisterClassExA
MessageBoxW
DestroyWindow
EndPaint
CharToOemBuffA
GetQueueStatus
SetParent
ModifyMenuA
ShowWindow
MsgWaitForMultipleObjectsEx
GetWindowThreadProcessId
MoveWindow
DdeGetData
DestroyCursor
DefWindowProcA
RegisterWindowMessageW
GetDlgItemTextW
CreateWindowExA
FreeDDElParam
FindWindowW
GetSysColorBrush
BringWindowToTop
LoadImageA
SetDlgItemInt
LoadCursorW
kernel32
GetCurrentProcessId
CreateFileMappingA
VirtualAlloc
ReadConsoleA
SetThreadPriority
CompareStringA
EnumCalendarInfoExW
GetACP
GetOEMCP
GlobalAlloc
FreeEnvironmentStringsA
SetStdHandle
RtlUnwind
ExitProcess
TlsSetValue
GlobalAddAtomW
LCMapStringW
GetEnvironmentStrings
GetLocaleInfoA
FlushFileBuffers
TerminateProcess
InterlockedExchange
GetUserDefaultLCID
GetCurrentThreadId
GetSystemTimeAdjustment
GetSystemInfo
ReadConsoleInputW
WaitForSingleObjectEx
LeaveCriticalSection
IsBadWritePtr
GetCPInfo
HeapCreate
EnumResourceTypesA
GetVersionExA
GetCurrentThread
OpenMutexA
HeapDestroy
WideCharToMultiByte
TlsGetValue
TlsAlloc
QueryPerformanceCounter
GetFileType
UnhandledExceptionFilter
TlsFree
GetEnvironmentStringsW
HeapSize
VirtualUnlock
DeleteCriticalSection
CompareStringW
WriteFile
CreateEventA
VirtualFree
SetFilePointer
GetModuleHandleA
GetStartupInfoA
SetEnvironmentVariableA
IsValidCodePage
GetDateFormatA
CloseHandle
SetLastError
InitializeCriticalSection
HeapFree
GetStdHandle
HeapReAlloc
GetLocaleInfoW
VirtualProtect
CreateMutexA
LCMapStringA
VirtualQuery
EnterCriticalSection
GetCurrentProcess
GetTimeZoneInformation
GetTickCount
GetTimeFormatA
GetProcAddress
GetModuleFileNameA
GetStringTypeA
SetHandleCount
GetSystemTimeAsFileTime
LoadLibraryA
MultiByteToWideChar
GlobalSize
IsValidLocale
DeleteAtom
HeapAlloc
ReadFile
EnumSystemLocalesA
GetProcAddress
CreateDirectoryA
GetLastError
GetStringTypeW
FreeEnvironmentStringsW
GetCommandLineA
Sections
.text Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 258KB - Virtual size: 258KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 102KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ