F:\dnpsWbyujycaZ\iqkfqAizlqjuf\aPwcedvdTljch.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b00eee9e202861b8fe92aec0b73bc4bd_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
b00eee9e202861b8fe92aec0b73bc4bd_JaffaCakes118
-
Size
78KB
-
MD5
b00eee9e202861b8fe92aec0b73bc4bd
-
SHA1
2052711d26a62f0f25982e492c8d5a36821cac0c
-
SHA256
2780c2741dd7ce231e4b9d21a193a8ae91a0c16a980a187931f308e76d6f003a
-
SHA512
39ec2a33ddc96fc072ef20896a71cfc5b740cb6783c1eb5eb5903721bf22d79f75ce5fa5b3ca2aa1065dcf445fc271af9702ec48bbe3df1e5206dcfe5260b1a0
-
SSDEEP
1536:AsqW/vdt9482bfnf4MlJ0bMpjGhuU9aurI1mOsJsxLFs:xBl2Dnf4YJ0wVGdtI17
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b00eee9e202861b8fe92aec0b73bc4bd_JaffaCakes118
Files
-
b00eee9e202861b8fe92aec0b73bc4bd_JaffaCakes118.exe windows:5 windows x86 arch:x86
664c7e82f6bf7c3c7989b0e8d62fb6b2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
ExcludeClipRect
Polygon
SetViewportExtEx
GetTextExtentPointW
GetPixel
SetMapMode
GetMapMode
FillRgn
GetTextMetricsW
LineTo
ExtTextOutA
ScaleWindowExtEx
CreateFontW
TranslateCharsetInfo
user32
GetDC
DrawEdge
GetClipCursor
RemoveMenu
CheckMenuItem
GetUpdateRgn
CharLowerBuffW
ShowWindow
GetDCEx
CharLowerA
DefWindowProcA
FindWindowExA
GetKeyboardLayout
IsCharAlphaNumericW
CreatePopupMenu
LockWindowUpdate
LoadStringA
MonitorFromPoint
DrawStateA
GetClientRect
GetSystemMenu
DefWindowProcW
CharNextW
AdjustWindowRect
LoadBitmapW
DispatchMessageW
GetWindowPlacement
AppendMenuW
kernel32
lstrcmpiW
VirtualFree
lstrcmpA
GetTempPathA
lstrcpyA
FlushFileBuffers
SetCurrentDirectoryA
ExitThread
GetShortPathNameW
GetLastError
HeapUnlock
LockFile
MoveFileA
MoveFileW
lstrlenW
GlobalFlags
GetSystemDefaultLangID
comctl32
CreateStatusWindowW
ImageList_GetIconSize
PropertySheetA
DestroyPropertySheetPage
InitCommonControlsEx
msvcrt
exit
ntdll
memset
strcspn
Exports
Exports
?b_AGCfnnzaV_QNMYPWGg_F@@YGXPAHPAG@Z
?nifxavimysM_Mun__y__@@YGMH@Z
?Fj_jogkghpwvrOXCKBV@@YGDE@Z
?GW_PZPKHV@@YGGK@Z
?_dntuBBK_AX_vk__x_@@YGPAMG@Z
?z_jfkdxoxvhanEmbaGQ@@YGEPAMM@Z
?xl__cnyk_qANEZFI_H@@YGD_N@Z
?fglro__YdVHlgepdi_kyOa@@YGMEPAM@Z
?sonqe_bGXN@@YGXPADK@Z
?_e_xc_mX__CBGLMLL@@YGPAKPAM@Z
?ani_od__C_CEFC__JYBl@@YGNK@Z
?urifng_@@YGNK@Z
?_h_pigxo@@YGEPAHPAN@Z
?_nzagiZ__Uqtjc_fVqjljL@@YGJDG@Z
?fbdp__O___J_Ey_r_@@YGDD@Z
?VLTOKRRD_yqehp@@YGPAXDE@Z
?GEJ__w_@@YGPAMPAI@Z
?ik__wjjNYALXM@@YGPAKHI@Z
?rfdhSKSFSq@@YGKPAIE@Z
?Bkb_rUyo_na_syb@@YGGPAIPAJ@Z
?__g_beidbyjDC_KURu_J@@YGKN@Z
?KPIWH_W_@@YGIN@Z
?VF_Q__DRFFRSZR_WLGL@@YGGPAI@Z
?Z_V_C__VPNFEZ@@YGPANPAJ@Z
?JWHXchaqzyW@@YGGPAMJ@Z
?kwnWUQ_PDB_P__JRQ@@YGPAENM@Z
?fizmGJD_Y_QUC_J_O@@YGPAIPAG@Z
?xb_KHQFBSU__UKLH_Q__FE@@YGXPAG@Z
?__GWTPVVIIa_hyCBI@@YGHEPAN@Z
?a_sb__GV_ZWX__s_adjm@@YGJI@Z
?_sBRLJYHD__MMuE_MQS@@YGPAXPADD@Z
?ld__sws_z__yg__rp@@YGPADEPAE@Z
?ogqdBIMBKo_b_iRHJ@@YGXE@Z
?__iqpALMFT_Rbrf@@YGFGG@Z
?OSXBC__ZApent@@YGJPAJ@Z
?__ONBP_VLLA@@YGPAEK@Z
?G__U_LTicEWGFOX_t_@@YGXJJ@Z
?_SSSYFS@@YGIFF@Z
?S_GEXIa_grqm_mzo@@YGPAMN@Z
?EVLGMA_XMV_EUISs@@YGPAJK@Z
?CJDVp_s_JZ@@YGXK@Z
?p_jnn_ktdpx_vQSGXH_@@YGPAMJ@Z
?_c__hnl@@YGHPAMM@Z
?QDO_ERmqubuuk@@YGPAXN@Z
?S_AIovwd_j_WNKX__Ruzgv@@YGIG@Z
?GE_XPm__cwkq_akTgqc@@YGPAJG@Z
?KH_XXJLJCOs_ovnpW_MEy_@@YGMG@Z
?a_r__wnkxlk@@YGPAIJE@Z
?rpvu_fowbzEIMi__dh_@@YGPANN@Z
?_YYVThnv_u@@YGEJPAJ@Z
?_ik_rPURdiXVsawm@@YGMPAG@Z
?GOTPFtygqdhU__U_LWCzc@@YGPA_NK@Z
?JWA_JLh_cwqsjmzJAzeub@@YGDEH@Z
?geuXGQ_JZ___@@YGKI@Z
?_Lih_wjy@@YGPANPAK@Z
?___SUXM_B_mawwlg_K_Fkx@@YGPAGPAH@Z
?OYDFTdJI__Prdos_t@@YGJPAG@Z
?IFEEOF__X_UKhmxlui@@YGE_N@Z
?EJ___NDT_nq_e_k_@@YGKPAHPAM@Z
?hb_xoXRi@@YGDF@Z
?TLOH____UAIilz_@@YGPAGPAI@Z
?mivij_fno@@YGPAEDJ@Z
?NMXNHBU_SG_Hfj_hvx_t@@YGPAHPAK@Z
?_GRVqevIP_VEBpozb@@YGIPAJ@Z
?pex_knC__SZHQ@@YGKG@Z
?_h_y__rho_MS@@YGDPANF@Z
?__ifrgT_M_@@YGXPAN@Z
?_un_woih_t_tPMCAj@@YGPAX_NPAE@Z
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ldata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.export Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 507B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ