g:\dexefan\aedsxyuscs\pdo\aefo\tpkckejgek\rjbze.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b7fed19813879cbfed8bd042b9e7ba83_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b7fed19813879cbfed8bd042b9e7ba83_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b7fed19813879cbfed8bd042b9e7ba83_JaffaCakes118
-
Size
572KB
-
MD5
b7fed19813879cbfed8bd042b9e7ba83
-
SHA1
9ad97cc78f8015c8b631b945ddde2bbcdf97544b
-
SHA256
694df8a4005a2d2e0e69b383f0158543a21957b207f5d3f9bb9e31ec1d9edf84
-
SHA512
b97cc2d47000c381062066ec92773dfb4fd4774a7e68eb1272e031ce8f634680821c80dc0183e0c37ad1f06dafb69f3e1380bdf05a24dce0560e6d1565f280b0
-
SSDEEP
12288:XrO/hyhIDxNTpWxhRPtBEWvs4qYpfgQHJplzIR:XrO/UhI2RMWvs4P9DdI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7fed19813879cbfed8bd042b9e7ba83_JaffaCakes118
Files
-
b7fed19813879cbfed8bd042b9e7ba83_JaffaCakes118.exe windows:4 windows x86 arch:x86
530890fcdaf0a2e9de58083c30b3ab87
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetOEMCP
SetLastError
EnterCriticalSection
GetTimeFormatA
CompareStringW
GetStringTypeW
VirtualAllocEx
GetPrivateProfileIntA
TlsSetValue
GetStringTypeA
GetVersionExW
ReadFile
DeleteCriticalSection
TlsAlloc
GetWindowsDirectoryA
GetFileType
GetEnvironmentVariableA
IsValidLocale
GetLocaleInfoA
GetTimeZoneInformation
GetPrivateProfileStringA
GetVersionExA
HeapFree
EnumResourceLanguagesA
LCMapStringA
GetUserDefaultLCID
WritePrivateProfileStringA
HeapSize
LeaveCriticalSection
LocalReAlloc
GetACP
WideCharToMultiByte
OpenMutexA
ExpandEnvironmentStringsA
GetCommandLineA
GetFileAttributesExW
LockFileEx
LCMapStringW
GetLogicalDrives
WritePrivateProfileStringW
InterlockedExchange
GetCPInfo
GetEnvironmentStrings
SetStdHandle
MultiByteToWideChar
CompareStringA
HeapCreate
EnumSystemLocalesA
QueryPerformanceCounter
TerminateProcess
FindResourceExW
GlobalHandle
GetLastError
GetEnvironmentStringsW
GetCurrentProcess
GetProfileSectionW
GetSystemTimeAsFileTime
InterlockedIncrement
InterlockedDecrement
HeapAlloc
VirtualAlloc
FreeEnvironmentStringsW
SetComputerNameA
lstrcmpiW
VirtualQuery
AllocConsole
WriteFile
UnhandledExceptionFilter
ExitProcess
lstrcmpA
GetCurrentThreadId
HeapReAlloc
EnumCalendarInfoW
GetProcAddress
SetFilePointer
LoadModule
FillConsoleOutputCharacterA
GetStdHandle
GetShortPathNameW
GetSystemInfo
TlsGetValue
GetStartupInfoA
GetLocaleInfoW
FileTimeToSystemTime
CommConfigDialogA
TlsFree
CloseHandle
GetDateFormatA
GetTickCount
GetModuleFileNameA
SetEnvironmentVariableA
lstrcpy
FlushFileBuffers
RtlUnwind
GetPrivateProfileIntW
IsValidCodePage
FreeEnvironmentStringsA
CreateMutexA
GetModuleHandleA
LoadLibraryA
VirtualFree
IsBadWritePtr
GetCurrentProcessId
ReleaseMutex
DeleteFileW
SetEnvironmentVariableW
HeapDestroy
InitializeCriticalSection
GetCurrentThread
SetHandleCount
MapViewOfFile
SetUnhandledExceptionFilter
ReadConsoleOutputW
VirtualProtect
advapi32
RegCreateKeyExA
RegConnectRegistryW
CryptDestroyKey
CryptSignHashA
LookupAccountNameW
LookupAccountSidA
CryptDuplicateKey
CryptExportKey
CryptSetKeyParam
RegEnumKeyW
user32
SendMessageW
RegisterClassExA
CharPrevExA
RemoveMenu
GetMessagePos
ShowWindowAsync
LoadCursorA
CreateDesktopW
PaintDesktop
OpenDesktopW
UpdateWindow
EnumDisplaySettingsA
RealChildWindowFromPoint
DeferWindowPos
AppendMenuW
GetDlgItemTextW
ClipCursor
GetListBoxInfo
MoveWindow
DdeQueryNextServer
RegisterClassA
wininet
GopherOpenFileA
DeleteUrlCacheEntry
CreateUrlCacheEntryW
comctl32
InitCommonControlsEx
ImageList_GetIcon
ImageList_AddIcon
ImageList_Create
ImageList_EndDrag
ImageList_SetImageCount
CreateStatusWindowA
ImageList_BeginDrag
ImageList_SetDragCursorImage
Sections
.text Size: 176KB - Virtual size: 174KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 264KB - Virtual size: 261KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ