c:\aesloco\jexddzcw.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c02f2ecd635336124b967732dac528a5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c02f2ecd635336124b967732dac528a5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c02f2ecd635336124b967732dac528a5_JaffaCakes118
-
Size
339KB
-
MD5
c02f2ecd635336124b967732dac528a5
-
SHA1
72268323974e5e6cd1f7f81309e4f90e2a5953f5
-
SHA256
267a77745aa71ff1d1e9e7340c0172aae7a7a69b857d33b220a1db7a4d0a0a84
-
SHA512
c96869cb19472fbb55d62d410dc6e7557e3b9f8bb5a0997473ac866f0e8413c889205e967ed47ea552ec42ff49747490020fdea6c524d54cc4fb1e5802bb2a73
-
SSDEEP
6144:m7LO/zcKYKVXHj7H7PDNklQ82Lioku2hJyvG9RXN7zrJNnZGXkfWFNxBktAua5P8:uLO4KYKVXHj7bbNklb3DN7HTnqmAuc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c02f2ecd635336124b967732dac528a5_JaffaCakes118
Files
-
c02f2ecd635336124b967732dac528a5_JaffaCakes118.exe windows:4 windows x86 arch:x86
04eab6e2f38def68fa41069a7b49258b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
GetGlyphOutlineW
GetDeviceCaps
GetAspectRatioFilterEx
CreateHatchBrush
GetMetaRgn
WidenPath
EnumMetaFile
ChoosePixelFormat
GetColorSpace
DeleteObject
SetMetaRgn
CreateColorSpaceW
DeleteDC
GetObjectW
CreateDCA
shell32
ExtractIconEx
SHQueryRecycleBinA
kernel32
GetSystemTimeAdjustment
GetEnvironmentStringsW
GetCurrentProcessId
HeapDestroy
GetSystemTimeAsFileTime
TlsSetValue
InitializeCriticalSection
ReadFile
GetDiskFreeSpaceW
DeleteCriticalSection
VirtualFree
GetProcAddress
EnumSystemLocalesA
GetModuleHandleA
HeapSize
GetSystemDefaultLangID
SetLastError
GetTickCount
GetStartupInfoA
SetFilePointer
GetStdHandle
EnumCalendarInfoA
GetOEMCP
HeapReAlloc
HeapCreate
GetTimeZoneInformation
SetConsoleScreenBufferSize
SetEnvironmentVariableA
WriteFile
FreeEnvironmentStringsA
EnterCriticalSection
HeapAlloc
HeapFree
WriteConsoleInputA
TlsFree
GetStringTypeA
VirtualAlloc
InterlockedExchange
GetModuleFileNameA
LCMapStringW
GetLocaleInfoA
GetLogicalDriveStringsA
GetUserDefaultLCID
WaitNamedPipeW
FreeEnvironmentStringsW
TlsGetValue
LCMapStringA
GlobalCompact
GetConsoleTitleW
OpenMutexA
TlsAlloc
CloseHandle
ExitProcess
GetCurrentThreadId
GetDateFormatA
UnhandledExceptionFilter
WideCharToMultiByte
GetThreadPriority
LeaveCriticalSection
SetCurrentDirectoryW
GetCurrentProcess
LoadModule
GetTimeFormatA
GetCompressedFileSizeA
SetStdHandle
GetCurrentThread
GetLastError
CompareStringA
GetEnvironmentStrings
IsBadWritePtr
GetEnvironmentVariableW
CompareStringW
IsValidLocale
TerminateProcess
RtlUnwind
GetCommandLineA
FindFirstFileA
SetConsoleActiveScreenBuffer
LoadLibraryA
CreateMutexA
MultiByteToWideChar
FlushFileBuffers
GetACP
GetLocaleInfoW
FoldStringW
WritePrivateProfileStructW
QueryPerformanceCounter
SetWaitableTimer
GetFileAttributesExA
FoldStringA
FindResourceExA
GetSystemInfo
VirtualProtect
GetVersionExA
UnmapViewOfFile
GetStringTypeW
lstrcatW
SetHandleCount
FreeLibrary
IsValidCodePage
GetFileType
VirtualQuery
GetTempFileNameA
GetProfileStringW
GetCPInfo
comctl32
ImageList_SetFlags
InitCommonControlsEx
CreatePropertySheetPage
user32
MessageBeep
AnyPopup
CreateDialogParamA
GetSysColorBrush
GetMenuItemID
GetClipCursor
RegisterClassA
IsChild
RegisterClassExA
EnumDesktopsA
ChangeClipboardChain
EndDeferWindowPos
OpenIcon
CreateDialogParamW
SetWindowsHookA
EnableWindow
InvalidateRgn
GetKeyboardLayout
CountClipboardFormats
GetDlgItem
GetQueueStatus
GetProcessDefaultLayout
EnumDesktopWindows
IsCharAlphaA
DdeFreeStringHandle
CallWindowProcW
DefMDIChildProcW
CharPrevExA
GetCursorInfo
comdlg32
LoadAlterBitmap
FindTextA
ChooseColorA
Sections
.text Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 97KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ