monkapew.pdb
Static task
static1
Behavioral task
behavioral1
Sample
055ed48cc354c204febd5c592f2a54e0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
055ed48cc354c204febd5c592f2a54e0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
055ed48cc354c204febd5c592f2a54e0_JaffaCakes118
-
Size
112KB
-
MD5
055ed48cc354c204febd5c592f2a54e0
-
SHA1
c909750ddcf17ff1f38e2d52b749321bb0c4eb2b
-
SHA256
bcf17fd9b48731c4a26498355be642c45c479284ad10fab2a6af7122ee31f5a3
-
SHA512
133a071cbcf75a06be08064a4af4d65763fa197e40f4f790570d13263d5b1bca4d8d4bb748b6405bdd360f2670341a15c852c3f4b31c01090e015b1e1086dfbe
-
SSDEEP
384:jfoTgy5bJMeUElcaoVWTm1gYVhTp9IkzzNVziGbSrtMbjmeQW+YA:Wb5bLlcaoVWC74mpV+W+tMbjoz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 055ed48cc354c204febd5c592f2a54e0_JaffaCakes118
Files
-
055ed48cc354c204febd5c592f2a54e0_JaffaCakes118.exe windows:4 windows x86 arch:x86
39be525feecb005ad3440c7707824ce4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
wtsapi32
WTSQueryUserToken
WTSFreeMemory
WTSEnumerateSessionsA
WTSRegisterSessionNotification
WTSVirtualChannelClose
WTSLogoffSession
WTSVirtualChannelQuery
WTSSendMessageA
WTSUnRegisterSessionNotification
WTSVirtualChannelOpen
WTSSetUserConfigW
WTSCloseServer
WTSQuerySessionInformationA
WTSOpenServerA
WTSEnumerateServersA
untfs
Recover
Format
FormatEx
Extend
shlwapi
UrlIsNoHistoryA
UrlCombineA
UrlCompareA
UrlIsOpaqueA
PathCombineA
UrlGetLocationA
UrlUnescapeA
UrlHashA
UrlCanonicalizeA
UrlIsA
UrlGetPartA
UrlEscapeA
PathCommonPrefixA
UrlCreateFromPathA
dbnmpntw
ConnectionVer
ConnectionWrite
ConnectionClose
ConnectionError
ConnectionRead
kernel32
GetCurrentThreadId
CreateDirectoryA
CompareStringW
CreateMutexA
TlsGetValue
CreateSemaphoreW
IsValidLocale
FoldStringW
HeapCreate
GetCurrentDirectoryA
WriteProcessMemory
GetDateFormatW
CreateNamedPipeW
GetConsoleAliasW
GetProcessHeap
GetTimeFormatA
GetNumberFormatA
LoadLibraryA
GetSystemInfo
SetEnvironmentVariableA
ExpandEnvironmentStringsA
GetEnvironmentVariableA
SleepEx
GetPrivateProfileIntA
GetTickCount
GetDiskFreeSpaceA
GetAtomNameA
CloseHandle
FormatMessageA
WriteFile
GetComputerNameA
CopyFileA
InterlockedExchange
CreateEventA
user32
DrawIcon
IsWindow
CreateWindowExW
GetCaretPos
CharToOemA
SetCursorPos
SetFocus
GetMessageA
LoadImageW
wsprintfA
DialogBoxParamW
authz
AuthzFreeResourceManager
AuthzFreeContext
Sections
.text Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ