I:\nMmxdAlJ\fezxcgzzizgW\xxeyhgkyE.pdb
Static task
static1
Behavioral task
behavioral1
Sample
bd456c89318af5151a2e9f43e3839c7e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bd456c89318af5151a2e9f43e3839c7e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bd456c89318af5151a2e9f43e3839c7e_JaffaCakes118
-
Size
223KB
-
MD5
bd456c89318af5151a2e9f43e3839c7e
-
SHA1
1d0273a5d1525e317155abbf8bc41dbccbfbffd5
-
SHA256
8d9565715bfb794160c653efb8313c8e0d343f3ac2a5fb91425aeadbb636e152
-
SHA512
04b2ff5dcfd9bb2a4655721df9a477e1667ffa564c1ea9a06d688b8ef2a94c6b50b08c0b6d91a43e43a45ca679bb8955aa6a5fec30c3e5a9b1734d283a8b249f
-
SSDEEP
6144:RHfm1q74Ufa/BbFTriT5krJf31pDFaPhw+T64+G507O:o1dUfaBbg9krJf1j2hw+uy50y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd456c89318af5151a2e9f43e3839c7e_JaffaCakes118
Files
-
bd456c89318af5151a2e9f43e3839c7e_JaffaCakes118.exe windows:5 windows x86 arch:x86
5c1f7a89195d2f73e8fca1ebf40e67da
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
ImageList_SetIconSize
ImageList_Remove
DestroyPropertySheetPage
ImageList_GetImageCount
ImageList_AddMasked
user32
DispatchMessageW
GetMenuStringA
EnumChildWindows
SetDlgItemTextA
DestroyCursor
PeekMessageW
CopyRect
GetLastActivePopup
ShowWindow
SetMenu
PtInRect
GetForegroundWindow
EndPaint
GetSysColorBrush
EndDialog
IsWindowEnabled
SetActiveWindow
GetMenu
AppendMenuA
SetDlgItemInt
LoadIconA
DefFrameProcA
SetWindowLongW
SendMessageW
GetWindowLongW
TileWindows
InsertMenuA
GetWindowRect
CreateDialogParamA
CallWindowProcA
DeferWindowPos
RegisterClassExW
DefFrameProcW
GetClassInfoExW
LoadCursorA
TranslateAcceleratorA
GetKeyboardType
WindowFromPoint
DefWindowProcA
EnableScrollBar
RegisterWindowMessageA
wvsprintfW
CharNextW
CheckMenuRadioItem
SendInput
FindWindowExW
SetCursorPos
GetCaretPos
SendNotifyMessageW
IsMenu
DrawStateA
EndTask
ExitWindowsEx
TranslateAcceleratorW
DrawTextA
PeekMessageA
PostMessageA
CharPrevA
InvalidateRect
InvertRect
UnregisterClassA
InsertMenuItemW
GetKeyboardLayoutList
DialogBoxParamW
DialogBoxIndirectParamW
GetDlgCtrlID
GetClassInfoA
GetDC
CheckRadioButton
GetMenuState
SetMenuDefaultItem
GetClassLongW
CheckMenuItem
GetWindowLongA
MonitorFromPoint
CreateMenu
RedrawWindow
CharLowerBuffW
CharUpperBuffW
CreateCursor
GetShellWindow
GetWindowTextA
ArrangeIconicWindows
SetScrollInfo
IsDlgButtonChecked
VkKeyScanW
kernel32
lstrcatW
BuildCommDCBAndTimeoutsA
SuspendThread
lstrcmpA
WinExec
SetCommMask
UnmapViewOfFile
GetDateFormatW
GetTempFileNameW
GetUserDefaultUILanguage
GlobalReAlloc
GetLocaleInfoA
GetSystemDirectoryA
SetMailslotInfo
MoveFileExW
GetSystemDirectoryW
SetCommBreak
SetHandleCount
GetCPInfo
GetShortPathNameA
LocalSize
ConnectNamedPipe
GlobalSize
GetACP
GlobalHandle
PulseEvent
RaiseException
UnlockFile
EnumResourceNamesA
GetLocalTime
MoveFileW
WaitCommEvent
FindFirstChangeNotificationW
GetThreadContext
GlobalCompact
GetFullPathNameA
DuplicateHandle
GetSystemDefaultUILanguage
GetCurrentDirectoryW
GlobalUnlock
RemoveDirectoryA
msvcrt
isxdigit
_controlfp
__set_app_type
wcstok
__p__fmode
__p__commode
_amsg_exit
ftell
_initterm
_acmdln
sprintf
free
vswprintf
exit
vsprintf
wcscspn
fgetc
_ismbblead
gmtime
strcoll
_XcptFilter
wcsncmp
wcscmp
strtoul
_exit
_cexit
__setusermatherr
__getmainargs
isupper
realloc
wcspbrk
fprintf
gets
iswalpha
wcslen
iswctype
isspace
wcsstr
wcscat
gdi32
PathToRegion
SetROP2
SetTextColor
FlattenPath
TextOutW
PtVisible
CreateFontA
SetBitmapBits
LPtoDP
GetTextExtentPointW
CreateHatchBrush
GetPixel
SetBrushOrgEx
GetDIBColorTable
CreatePen
GetTextExtentExPointW
GetTextExtentPoint32A
CreateCompatibleDC
GetBitmapBits
CreatePolygonRgn
GetCurrentObject
GetObjectA
RemoveFontResourceW
DeleteDC
GetLayout
OffsetRgn
Escape
SelectClipRgn
GetDeviceCaps
PolyBezier
DeleteObject
SelectPalette
SetWindowOrgEx
CreateDCW
EnumFontsW
PatBlt
Exports
Exports
?ResetEventHDJhjhFff@@YGKEPA_WG@Z
?ResetEventHDhjdDYUuYdf@@YGKEPA_WG@Z
Sections
.text Size: 179KB - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dbg_ Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ