F:\faxtxfrzrKUmKq\xwhzqNSee\gwqVwOHjVkFtX.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f75717d817eaf1dce81074e7daad9262_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f75717d817eaf1dce81074e7daad9262_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f75717d817eaf1dce81074e7daad9262_JaffaCakes118
-
Size
3.1MB
-
MD5
f75717d817eaf1dce81074e7daad9262
-
SHA1
767162ef5358074624e7f9331c5df24cabd3f219
-
SHA256
e11460d4bf65827d58d5790883be3993a28e56840f5133bbd91f2a75c42d6513
-
SHA512
c1fe7cae0e1b53aa73a04850df2cecaf4fc8fb0535089b40eac7559b4757b27bf9b0c387b6bb18c97ab99f704e0f863d3f6f8f786ab026a7ee2e68b5d3027e52
-
SSDEEP
49152:IBpgkDhX3jLu+T2nVnmnRMV/lTKcnTVLnKOvnnWNT:o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f75717d817eaf1dce81074e7daad9262_JaffaCakes118
Files
-
f75717d817eaf1dce81074e7daad9262_JaffaCakes118.exe windows:5 windows x86 arch:x86
a84072d4726cd7f61ce95bf20fc29472
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
GetTextExtentPoint32W
CreateRectRgnIndirect
SetViewportExtEx
GetViewportOrgEx
CreatePolygonRgn
CreateRectRgn
SetStretchBltMode
CreateFontA
SetPaletteEntries
SetDIBitsToDevice
CreateHalftonePalette
AddFontResourceW
RestoreDC
shlwapi
UrlGetPartW
StrStrA
ChrCmpIA
PathSearchAndQualifyA
StrToInt64ExA
msvcrt
exit
user32
GetMenuItemRect
DestroyCursor
FillRect
TrackPopupMenu
DrawAnimatedRects
GetDialogBaseUnits
SetCursorPos
ActivateKeyboardLayout
IsDlgButtonChecked
TileWindows
ShowScrollBar
ReplyMessage
PostMessageA
GetLastActivePopup
BeginDeferWindowPos
SetLastErrorEx
GetScrollInfo
WindowFromPoint
LookupIconIdFromDirectory
CharToOemBuffA
IntersectRect
TrackPopupMenuEx
GrayStringW
CheckDlgButton
LoadStringA
GetKeyboardLayoutNameW
GetMessageA
GetMessageTime
CallWindowProcW
AppendMenuA
kernel32
lstrcmpiW
FindCloseChangeNotification
lstrcatA
GetTickCount
GetSystemDirectoryA
DeleteFileA
GetThreadContext
SetCommState
GetSystemTimeAdjustment
CreateDirectoryW
lstrlenW
GetWindowsDirectoryW
VerifyVersionInfoW
GetCommConfig
AreFileApisANSI
RemoveDirectoryW
CompareStringW
lstrcpynA
GetUserDefaultUILanguage
ntdll
memset
Exports
Exports
?PVITLEzve_r__w@@YGJH@Z
?_zj__KRET_@@YGPA_NPAEH@Z
?drca_FL_UVQQYB___B@@YGNG@Z
?HTCEUYZHJZCD_@@YGXPAE@Z
?NKSV_ZD_TLTDVnpcnyBHly@@YGDE@Z
?JLFN_TKYYO_@@YGEPAN_N@Z
?ty__fzH_I@@YGMK@Z
?TvooGCK__BYxid@@YGPADF@Z
?MFKOXaeb_ozl___aMRT@@YGPAME@Z
?C__zgvmnzVO@@YGMH@Z
?FXQHYZilwvEES_Q_OuefrJ@@YGPAJGK@Z
?wrYYK__mcghkgkn@@YGND@Z
?_WykoIS__LLI_P_SG_XH@@YGPANHM@Z
?ataQ_SZWq_yXmbwd_q@@YGJJK@Z
?oy_dvq_gM@@YGPANJ@Z
?_AX_iGxeV_@@YGXPAIG@Z
?O__VV_YOAmkjuogqngey@@YGDK@Z
?_wfq_p_a_s_QQNRN_@@YGPADPAF@Z
?_fw_t__cBRSYN_MTA@@YGPAGJE@Z
?_PQL_iciv_QA_CKOV_B@@YGXD_N@Z
?os_lijemLTWThfDD@@YGMPAIPAE@Z
?P_IQNDVI@@YGXPAH@Z
?SWGIT_te_ydLzo_@@YGXPAME@Z
?l_anc__ct__mwwVXVUE@@YGMG@Z
?fcvxp_efq_@@YGFPAKE@Z
?yfomnDATYkjeDOVvvO_B_@@YGFJJ@Z
?wsmcrQAV__NHxhdv_h@@YGPANG@Z
?j_zub_doCpmkxZOTEBrqn@@YGFJ@Z
?FZ_CovdCk_yx_nyLBPLJlj@@YGEG@Z
?GE_B_VP_UUOACR_X@@YGEM@Z
?WNXFUmuhKAUI@@YGPADH@Z
?__tnmgjCYSuakc@@YGXPAJ@Z
?KTSBAOFJ_@@YGGNM@Z
?tmxqsuxlji@@YGNPADPAJ@Z
?XFA___Y_Sppzc_Ry__qni@@YGXPAK@Z
?LF_Iywppco_z@@YGHPA_NJ@Z
?wnxs_sBJ_yo_gqSNmfi@@YGPAGHG@Z
?uec_FUXqtt_UZFNHC@@YGGPAH@Z
?_bk_k__p_r@@YGJK@Z
?CEIOHFIctyhH_L_KWBte@@YGXPAJ@Z
?HGU__YNC__Nadc@@YGI_ND@Z
?lbyzycuz@@YGMPAFPAG@Z
?lrpznuif@@YGPAEDPAK@Z
?Y_cu_pVDU_IHEK_@@YGFPA_N@Z
?LKKtmp__@@YGXI@Z
?p_pfwhQD_YEUK_X_Y___W@@YGMH@Z
?VBJYCe____v@@YG_NI@Z
?QQVj_wlht__j@@YGI_NJ@Z
?_Cxqjocg_bnt_HmkX@@YGPADG@Z
?WONAIWQSCitf@@YGPAJE@Z
?zbp__SA@@YGXPAID@Z
?gdy_js_N@@YGNM@Z
?DNVYLWBSED@@YGEPAG@Z
?lFPA_HG_JYRpvo@@YGXPAI@Z
?Q_G_RP__id_goi@@YGMPAJH@Z
?C_WA_NJQCE_@@YGGM@Z
?B_KBljgsdiTIq_gPOX_G@@YGDN@Z
?vrNPOlngjxmp_AND_TAQH@@YGIPAF@Z
?Ptpxpzp_@@YGPAMII@Z
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 297KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.icode Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.3MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ldata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 515B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ