I:\CnZmqvkxnTi\HvriAwWfyIsMx\zrkqhfpqBlonl\BtslrbknkoiFFf\viAxydWlwKhDv.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fda63b97a8eaab6b81a3ea11532fcfca_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fda63b97a8eaab6b81a3ea11532fcfca_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fda63b97a8eaab6b81a3ea11532fcfca_JaffaCakes118
-
Size
147KB
-
MD5
fda63b97a8eaab6b81a3ea11532fcfca
-
SHA1
ed2bca05dbecee8b26f3861f9e7e33c6e58d2c90
-
SHA256
31515b4a9eb94ddf1079f8c5d48d5b73281453c740e30033a68ba0a08da2fb33
-
SHA512
a56b373d0f7c0c3b8519093f9cf68ff21d3f44679b29a6f55db4f6eaa8ab49862780800c214542d2d6931a4f9bac68a4b03ce8496350f216165f36fa1277fda6
-
SSDEEP
3072:WrwE9WRHImvFUohzDPrtwPuGV7IQPPgOvCM3WgnmWz:WrJWRomNTc/V7LPPgOqMP5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fda63b97a8eaab6b81a3ea11532fcfca_JaffaCakes118
Files
-
fda63b97a8eaab6b81a3ea11532fcfca_JaffaCakes118.exe windows:5 windows x86 arch:x86
0482a077d3a3f59cd63374e89d8d8878
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
CreateDialogParamW
TileWindows
GetDlgItemInt
OpenInputDesktop
CreateDialogParamA
LoadStringW
CheckDlgButton
GetSysColor
GetSystemMetrics
GetMenuItemInfoW
ClipCursor
LockWindowUpdate
GetMenu
LoadIconA
LoadMenuW
SendMessageTimeoutW
ToUnicodeEx
RegisterHotKey
SetDlgItemInt
FillRect
GetClassInfoExA
GetAsyncKeyState
GetMessageA
SetScrollRange
TabbedTextOutW
GetClassLongW
DrawFocusRect
LoadMenuA
IsWindow
GetIconInfo
msvcrt
exit
gdi32
BeginPath
EnumFontFamiliesExW
CreatePalette
IntersectClipRect
DeleteObject
GetNearestPaletteIndex
GetLayout
CreateFontW
GetDIBits
GetCurrentObject
CreateHalftonePalette
UnrealizeObject
GetWindowOrgEx
ntdll
memset
comdlg32
CommDlgExtendedError
ReplaceTextW
ChooseFontW
GetSaveFileNameA
shlwapi
StrToInt64ExA
StrStrA
ChrCmpIA
UrlGetPartW
PathSearchAndQualifyA
kernel32
GetFileAttributesW
CreateNamedPipeW
CreateEventW
SetThreadLocale
GlobalDeleteAtom
GetDateFormatW
CompareStringW
CreatePipe
ConnectNamedPipe
QueryDosDeviceW
EnumResourceTypesA
lstrcmpiW
lstrcpynA
SetCurrentDirectoryA
lstrlenW
lstrcatA
GetTickCount
DefineDosDeviceW
Exports
Exports
?wyddWsuhrmqkl_wns_PIZP@@YGXPAK@Z
?__t___kum_nlzJ_U@@YGDH@Z
?adnnfRWX_WewcdSHi_a@@YGFHK@Z
?_LPP__ECIJf@@YGEN@Z
?__HHCHSltr___xw_STKgrd@@YGXPAJG@Z
?iP_Y_K_N@@YGFMK@Z
?ipu_zhegfdZvqo@@YGPAXPAHPAI@Z
?__afkkzURMTFN@@YGPAXPAM@Z
?_DS__V___RSSVTDEKQKS_f@@YGPADPA_NPAN@Z
?__mb_NEX_Z@@YGXMI@Z
?_uqriZ_Sipfs_em_@@YGPAFFK@Z
?srdn_X_Y_CK_@@YGXM@Z
?uVTPTUhmhiIYR@@YG_N_NPAG@Z
?KA_Q_APm@@YGGF@Z
?bl_QYqr_vNHAMU@@YGNH@Z
?KRFWAKg@@YGEH@Z
?NVPQn_bb@@YGDI@Z
?n_jegdkbxhbJO_V_@@YGXPAH@Z
?a__xlavP@@YGXKPAJ@Z
?ckfm_ixvqkb_tcdpnopm_y@@YGMHD@Z
?OAwr_f_kna_@@YGPADE@Z
?Qv_c_bkxqjt_i_qmo@@YGMMM@Z
?_pajcdhyKFPL_Y_A__FS_L@@YGPAFPAFD@Z
?WEkp___nLF__yppsWU@@YGPAMPAHPAD@Z
?I_BJ_vkuyfJERJ_gkc@@YGPA_NN@Z
?w_l_azK_UF@@YGHMPAI@Z
?reur_d__zx_zamlaj@@YGPAGGK@Z
?_TVRY_Pu_az@@YGPAKPAMPAJ@Z
?IK_NQ_BZUYzm____@@YGPAKPAN@Z
?Y_YUipfqyisI@@YGPAII@Z
?TPIOE___W@@YGJJN@Z
?__R_AYtvx_@@YGMJ@Z
?V__A_OGej_aKueimw@@YGFG@Z
?JLYAKxyy_tvg__qb@@YGPAMF@Z
?K_X_BRKMAOSWYK____@@YGPAXIPAH@Z
?XMMBJCeh_xo_ZV_MZQ@@YGXF@Z
?EPNJ_ZX@@YGPAIPAEJ@Z
?hB_DPGGtadm__ouhwyq__Q@@YGDIG@Z
?DDYFZ_ALYDAALWIMG@@YGF_NPAF@Z
?bp_msum_qaQGTZ_R_EJM@@YGDGG@Z
?xyOEWyxjdzQLv_XI_W@@YGXIH@Z
?fqcqqUA_E_VTQ_@@YGPAEH@Z
?_duDQt_vMYDSiGW@@YGNE@Z
?_MFUJX_LFhflnQSM@@YGPAJI@Z
?XY_FY_NL_T_@@YGDPANPAD@Z
?jxsdkbhfg__p_@@YGDM@Z
?tjfmP__DZY__Wkh_y_@@YGHKF@Z
?_mucrrv_s_g_P_@@YGFPAIM@Z
?quspfuqkwmwrC_H__Jh_j_@@YGMKN@Z
?_E_ZXG_JNazhazqefdiwe@@YGJPAK@Z
?mmwnkxvm_oMRghygD@@YGPA_NNE@Z
?_ol_lmlPOB_LM_v_lqi@@YGXJ@Z
?oyUNgNDW_ikdL@@YGFPAH@Z
?hbolKGPNB_JRn@@YGPAXEPA_N@Z
?CDNLSCPXFT_pb_q@@YGGE@Z
?C___JBEPCNGW@@YG_NIPAK@Z
?NSGDtoujbvxw@@YGHF@Z
?dmGY__NYZrXUNPXI@@YGHPAH@Z
?zmznvo_@@YGIN@Z
Sections
.text Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.icode Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 189KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ldata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 531B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ