O:\ekjcxMfNfLjtykcgofzkkx\qaosbxNAdJxmgcgloyag\yrwYfkuQmyQNwedmwwftbd\afOzivqsgcNzShkvHn\kVumBxigteLD\kaHczxUBSNoLnxil\amliosLdDVcTZon.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f0b23754b5a10a29cd56eeba93cc7f2c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f0b23754b5a10a29cd56eeba93cc7f2c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f0b23754b5a10a29cd56eeba93cc7f2c_JaffaCakes118
-
Size
143KB
-
MD5
f0b23754b5a10a29cd56eeba93cc7f2c
-
SHA1
c5e3b320b48dae726b61d33df40fc813d8a2628d
-
SHA256
4efed58ee3b97a2e6a5fb53ff54bfc9f56eecb653f64af9f57fc6bc66e59bb9c
-
SHA512
952ccb75eeff955c0b48e45a5b4ea6571a2e0b4c3e24d1c7cb13f2dde441874032a03a0556d5ff7fd26b1a222a23cf3feee640433dd0702680dae7d5567868c9
-
SSDEEP
3072:A+o8G4QV8Cn0qcC/E01Up+mKwJAj94kpt6yGtxiJgvPj+pxtGQ59lS4N:AGYjn0OsuUOnlQtxEgXjzUS4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0b23754b5a10a29cd56eeba93cc7f2c_JaffaCakes118
Files
-
f0b23754b5a10a29cd56eeba93cc7f2c_JaffaCakes118.exe windows:5 windows x86 arch:x86
0562d6ad93300177a7c3c22b32c7eeea
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comdlg32
GetOpenFileNameW
GetOpenFileNameA
gdi32
OffsetRgn
OffsetViewportOrgEx
RestoreDC
SaveDC
SetBitmapDimensionEx
GetWindowOrgEx
ResizePalette
GetClipBox
SelectObject
PolyBezier
StretchDIBits
GetTextMetricsA
BeginPath
shlwapi
StrFormatByteSizeA
ChrCmpIA
StrToIntA
PathSearchAndQualifyA
kernel32
CreateWaitableTimerW
LoadLibraryExW
FormatMessageA
lstrlenW
EnumResourceLanguagesA
GetStringTypeExW
FindResourceExW
GetThreadLocale
lstrcmpiW
HeapAlloc
GetSystemDefaultLangID
DisconnectNamedPipe
GlobalGetAtomNameA
FoldStringW
GlobalLock
EnumResourceNamesA
SleepEx
GetProcessHeap
user32
ToUnicodeEx
GetUpdateRect
GetForegroundWindow
AdjustWindowRectEx
DestroyWindow
IsWindowVisible
CopyImage
GetClientRect
OffsetRect
ScrollWindow
CloseDesktop
SwitchToThisWindow
SetDlgItemTextA
DestroyAcceleratorTable
WaitMessage
AttachThreadInput
UnloadKeyboardLayout
ScrollWindowEx
GetKeyboardLayoutNameW
DrawMenuBar
GetWindowTextA
ArrangeIconicWindows
SetLastErrorEx
FindWindowW
MonitorFromRect
GetKeyboardLayoutList
SetMenuDefaultItem
wvsprintfW
SetDlgItemInt
CharLowerA
Exports
Exports
?gnuyljafpbprq_kakyzrt@@YGPAGPAGPAK@Z
?_y__cnw_@@YGMK@Z
?_sczbaHEO_O__VY_BYoz@@YGIG@Z
?XidZ_KLOA__KY_OouxpZ_K@@YG_NEN@Z
?IXCsn_oxqENS@@YGPAEIG@Z
?mznRFRL@@YGFF@Z
?sh_agc__yko__ux_lf@@YGED@Z
?ylgbfaumzHmthmz@@YGPAXK@Z
?Y_XFXv_kc@@YGPADMI@Z
?WTUWCAWF_ImO@@YGHPAEPAE@Z
?N_AExyhqXW_@@YGDPAH@Z
?izlhGYTI__PD_ab_xtsvfj@@YGXH@Z
?U_JNDAkpt__zq@@YGPAHPAE_N@Z
?bhalzKNU_D_O_UXmmwxw_@@YG_NHM@Z
?_whs_kTCH_BX_@@YGPAXM@Z
?_t_octSF_WTFVJSRJEM@@YGIM@Z
?_E_G_c_n_in_boRQYG@@YGNMPAD@Z
?fx_pvcc_FU_B@@YGKJM@Z
?k_xrrf__rN_XPHBhchCK@@YGPAXDH@Z
?lp_ww_xbgfA__HFYCdh_m@@YGIPAJ@Z
?K_CT_MNTQWE_F_@@YGXH@Z
?BZS__smdx_u_a___YWcTGB@@YGMNI@Z
?_QWGEUiicyowtQXWBjjv@@YGXPAMI@Z
?W_G_MPRU_SS@@YGMPAIN@Z
?y_b_axFECN_I_XzrxgxM@@YGPAXMG@Z
?PCVBOOD_beVO_I@@YGHED@Z
?M_XWNRA_VT__IPFZ_VUp@@YG_NF@Z
?m_AYSUKWGEK@@YGPAJPAM@Z
?zcafVWL___OU_B_S_qFc@@YGHPAME@Z
?dAULfom_rvscwKK_R@@YGPAGPAI@Z
?H_GB_I_UYuffch_IIh@@YGGPAKF@Z
?cyjqmrxz___uta@@YGEPAI@Z
?_IWZ__VyfHq@@YGPADJE@Z
?_J_HEekux@@YGPAFPAHPAD@Z
?_tZ_T_Klqh@@YGGPAK@Z
?MMT_SVFXPUscc_@@YGEFK@Z
?cnF_M_UGRTHPMyion@@YGIPAH@Z
?DPNLM_molzrdzpzrjc@@YGPAMIPAG@Z
?_jgr_bbBBnhoz_gbizg_p@@YGGM@Z
?N_PCSK_ei@@YGEPAH@Z
?KLDESXY_MIF__fv_piS_J@@YGK_N@Z
?_m_JAuhvn__@@YGFHH@Z
?_CPNIG_WYug@@YGHPAGPAD@Z
?_FLXTETIEV_HaelHBRBB@@YGPAXDPAF@Z
?LCVRowcS__MGHN@@YG_NM@Z
?R_MRBN_X_GCDxfgq_pxkf_@@YGEMPAE@Z
?gz_ir_zppw@@YG_NEJ@Z
?FZ__TPylzwsrkcqfONBCG@@YGPAIEK@Z
?tptuPT_JTY__Q__@@YGXPAIM@Z
?ea_Z_ZQ_rd__oinvM_OI@@YGEF@Z
?H__WQ__MIqohN@@YGPAXMPAM@Z
?B_Vc_nvlpdiz@@YGPAHEPAG@Z
?apaxoLI_@@YGPAHDPAI@Z
?OQ_R_IOE__y@@YGHPAIG@Z
?VOJ_G_YY_N@@YGDPAJ@Z
Sections
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 34KB - Virtual size: 190KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 503B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ