monkapew.pdb
Static task
static1
Behavioral task
behavioral1
Sample
071bd805196d30e6b40760e1c39aeca0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
071bd805196d30e6b40760e1c39aeca0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
071bd805196d30e6b40760e1c39aeca0_JaffaCakes118
-
Size
108KB
-
MD5
071bd805196d30e6b40760e1c39aeca0
-
SHA1
b3b91ff4d73dc4b4266fb9bc4006032bc77c5f11
-
SHA256
cd6d83acd171f66ca822eb03622789afabd709b2b3f85a8b0d63f3e5779c01a6
-
SHA512
235c6cf1d0f5ef84f67fbaf06457ad4af8e82191d1fc556cef170eaf03b3e264417ba77a324fa0bd89f9b3d21fc290e3fae2753237c986385e73caa0aee5e3ed
-
SSDEEP
384:/foTgyfws6R8vAO5rtuw4r9hXziGbSrtMbjmeQW+YA:abfws6CvAOjuw4JF+W+tMbjoz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 071bd805196d30e6b40760e1c39aeca0_JaffaCakes118
Files
-
071bd805196d30e6b40760e1c39aeca0_JaffaCakes118.exe windows:4 windows x86 arch:x86
39be525feecb005ad3440c7707824ce4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
wtsapi32
WTSQueryUserToken
WTSFreeMemory
WTSEnumerateSessionsA
WTSRegisterSessionNotification
WTSVirtualChannelClose
WTSLogoffSession
WTSVirtualChannelQuery
WTSSendMessageA
WTSUnRegisterSessionNotification
WTSVirtualChannelOpen
WTSSetUserConfigW
WTSCloseServer
WTSQuerySessionInformationA
WTSOpenServerA
WTSEnumerateServersA
untfs
Recover
Format
FormatEx
Extend
shlwapi
UrlIsNoHistoryA
UrlCombineA
UrlCompareA
UrlIsOpaqueA
PathCombineA
UrlGetLocationA
UrlUnescapeA
UrlHashA
UrlCanonicalizeA
UrlIsA
UrlGetPartA
UrlEscapeA
PathCommonPrefixA
UrlCreateFromPathA
dbnmpntw
ConnectionVer
ConnectionWrite
ConnectionClose
ConnectionError
ConnectionRead
kernel32
GetCurrentThreadId
CreateDirectoryA
CompareStringW
CreateMutexA
TlsGetValue
CreateSemaphoreW
IsValidLocale
FoldStringW
HeapCreate
GetCurrentDirectoryA
WriteProcessMemory
GetDateFormatW
CreateNamedPipeW
GetConsoleAliasW
GetProcessHeap
GetTimeFormatA
GetNumberFormatA
LoadLibraryA
GetSystemInfo
SetEnvironmentVariableA
ExpandEnvironmentStringsA
GetEnvironmentVariableA
SleepEx
GetPrivateProfileIntA
GetTickCount
GetDiskFreeSpaceA
GetAtomNameA
CloseHandle
FormatMessageA
WriteFile
GetComputerNameA
CopyFileA
InterlockedExchange
CreateEventA
user32
DrawIcon
IsWindow
CreateWindowExW
GetCaretPos
CharToOemA
SetCursorPos
SetFocus
GetMessageA
LoadImageW
wsprintfA
DialogBoxParamW
authz
AuthzFreeResourceManager
AuthzFreeContext
Sections
.text Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ