Z:\ABnWAvfCdsgek\rRHUjwOcz\myIcJOabffauA\Lyewaidpjbgx\rjcPAdlnhwqfNN.pdb
Static task
static1
Behavioral task
behavioral1
Sample
07673a6f3a1c6862a0a9cab232983871_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
07673a6f3a1c6862a0a9cab232983871_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
07673a6f3a1c6862a0a9cab232983871_JaffaCakes118
-
Size
165KB
-
MD5
07673a6f3a1c6862a0a9cab232983871
-
SHA1
98b0d073a453c01b43bf78b40a126a4546f52663
-
SHA256
65c61b5540359861c11c5bdf24931b7ee19137915bcf6b0327625737edf279ec
-
SHA512
dd4b2a755fe7dd9935c97c251c1c7b7bda1a708a09fac90a56ae264dbfa11ae9e61de11a3db4dc6ccb112b0b82cd2b69d2764e1c6fc8e4e1acb8d024d81b7d30
-
SSDEEP
3072:qpO5toFefJnS8u1vYLpHsapCpoeU5fYzUmwOT+Svcnuu4APChyim:v5Wg7pHsRrUBYyOTrEnuu4J7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07673a6f3a1c6862a0a9cab232983871_JaffaCakes118
Files
-
07673a6f3a1c6862a0a9cab232983871_JaffaCakes118.exe windows:5 windows x86 arch:x86
d324188c486f60abb3753e29f108bac2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
SetBitmapDimensionEx
GetCurrentObject
GetTextMetricsW
RealizePalette
BitBlt
WidenPath
PathToRegion
CreatePenIndirect
PtInRegion
GetNearestPaletteIndex
EnumFontsW
SetWindowOrgEx
GetSystemPaletteEntries
GetTextExtentPoint32A
Polygon
SelectClipRgn
GetTextExtentPoint32W
GetBitmapBits
SetBrushOrgEx
shlwapi
ChrCmpIA
StrToIntA
StrToInt64ExA
PathRemoveBlanksW
kernel32
ClearCommError
FindNextChangeNotification
MoveFileA
GetFileInformationByHandle
SetTimerQueueTimer
GetTempPathW
LocalUnlock
CreateEventA
GetOverlappedResult
GetFullPathNameA
DeviceIoControl
OpenFileMappingA
ExitProcess
GetModuleFileNameW
GetDateFormatA
SetThreadExecutionState
GetCommModemStatus
IsBadWritePtr
SetSystemTimeAdjustment
lstrcpyW
GlobalFree
CreateFileMappingW
user32
SetForegroundWindow
CreateWindowExW
GetWindowLongW
GetActiveWindow
ShowOwnedPopups
ChildWindowFromPoint
WindowFromPoint
MapDialogRect
InvalidateRect
DispatchMessageW
FindWindowW
OpenInputDesktop
AdjustWindowRectEx
PeekMessageA
UnionRect
GetAsyncKeyState
PostThreadMessageA
DrawEdge
TranslateAcceleratorW
SetWindowPlacement
CharPrevA
CreateMenu
GetWindowTextLengthW
MonitorFromPoint
ExitWindowsEx
CreateAcceleratorTableW
GetMenuStringW
TrackPopupMenu
CharUpperBuffA
HiliteMenuItem
SetLastErrorEx
KillTimer
SendNotifyMessageW
InvertRect
DispatchMessageA
OemToCharBuffA
DrawFocusRect
GetDlgItemTextW
LoadBitmapA
SetCaretPos
DeferWindowPos
IsIconic
DialogBoxParamW
GetDialogBaseUnits
msvcrt
remove
atol
_controlfp
__set_app_type
fclose
clock
putchar
__p__fmode
__p__commode
_amsg_exit
_initterm
iswdigit
_acmdln
exit
wcsncmp
_ismbblead
strcpy
_XcptFilter
swscanf
isprint
_exit
isalnum
_cexit
__setusermatherr
__getmainargs
strrchr
strstr
Exports
Exports
?AddFullNameW@@YGFF&U
?IncrementMessageOriginal@@YGPAKPAIDJJ&U
?PutEventNew@@YGPAGJK&U
?IsNotNameExA@@YGDHI&U
?InstallThread@@YGHEPAFFF&U
?FindNameA@@YGXEE&U
?SendPathW@@YGHKJF&U
?KillMediaTypeExW@@YG_NJDI&U
?IsNotAnchorNew@@YGGPAEPAMI&U
?FindWindowOld@@YGPAIIHPAMPAJ&U
?FormatListItemExA@@YGJPAJGDF&U
?SetDateTimeExW@@YGPAKPAMEH&U
?PutKeyboardA@@YGKEPAJI&U
?CallState@@YGDNPAD&U
?CrtSystem@@YGPAXDPAHPAJ&U
?PutProvider@@YGPAMG&U
?HideMemoryOld@@YG_NPAH&U
?GlobalTextA@@YGGM&U
?IsValidProcessExW@@YGIPAG&U
?CrtSystemExA@@YGEDI&U
?DeleteFullNameEx@@YGIPAF&U
?GetComponentOriginal@@YGPAGDGG&U
?GenerateMediaTypeExW@@YGPAXMPAEPAIPAH&U
?ValidateMutantOriginal@@YGXPAGPAEMD&U
?ThreadNew@@YGPAD_NPADK&U
?CloseTextW@@YGPAXK&U
?GlobalMediaTypeA@@YGPA_NF&U
?KillWindowInfoExW@@YGMK&U
?FreeClassOld@@YGXPAJHF&U
?CopySectionNew@@YGKG&U
?SetEventOriginal@@YGDJPADG&U
?CrtSystemOld@@YGJPAHPAM&U
?AddModuleOriginal@@YGMNPAI&U
?CallFolderPathOriginal@@YGPAJFMK&U
?IncrementMutantEx@@YGJDF&U
?IsValidDirectoryNew@@YGEMGD&U
?FindProjectOld@@YGMDD_NPAI&U
?CallFullNameEx@@YGXEJM&U
?ValidateCommandLineW@@YGPAHNGKI&U
?CancelFullNameEx@@YGNKPAMPADPAF&U
?InsertVersionW@@YGFNIK&U
?LoadScreenA@@YGMF&U
?CrtProfile@@YGGKPAD&U
?DecrementComponentW@@YGPAKPAF&U
?CancelFullName@@YGDKEFPAG&U
?ShowSemaphoreOld@@YGPAXKII&U
?ListNew@@YG_NGPAG&U
?DecrementPathOld@@YGHI&U
?IsValidValueW@@YGPAXPAKPAENPAK&U
?IsValidDeviceNew@@YGPAKHJGI&U
?HideConfig@@YGPAXNGPAK&U
?LoadTaskNew@@YGPAXK&U
?DeleteClass@@YGEIMPAI&U
?DecrementWindowExW@@YGKINFI&U
?IsValidCommandLineW@@YGDHJ&U
?CopyDateTimeExA@@YGJPAMPAFFPAH&U
?GlobalHeightExA@@YGNKK&U
?GlobalHeaderExA@@YGPAGPA_NPAMEE&U
?InsertMessageA@@YGMPADPAHPA_NPAN&U
?ValidateListItemExW@@YGKK&U
?EnumStringExA@@YGGPAFF&U
?InvalidateCharOriginal@@YGFGHPAI&U
?HideClassOriginal@@YGNPAMPAI&U
?GetWindowInfoNew@@YGKM_NGF&U
?InsertFileExA@@YGIE&U
?SendSystemExA@@YGPAEH&U
?CallDateTimeEx@@YGPAIPAJ&U
?CallEventOld@@YGIFE&U
?FormatOptionExA@@YGPAMPAINI&U
?RemoveStringOld@@YGIGD&U
?InvalidateDeviceExA@@YGHE&U
?KillStringOld@@YGHPAIPAH&U
?KillTextNew@@YGNFGHPAM&U
?OnSizeA@@YGXGJPAEPAN&U
?IsComponentEx@@YGIGEPAG&U
?ModifyProfileOriginal@@YGDPAG&U
?InsertStringOriginal@@YGPAGPADDM&U
?IsValidStateW@@YGIFPAKMK&U
?DeleteConfigExA@@YGDPADPAHIPAK&U
?ShowStringExA@@YGPAGIPAJ&U
?SetStringNew@@YGIF&U
?ModifyMemoryEx@@YGGPAGFEPAE&U
?InsertMainStructDlhSi@@YGKGH@Z
?FormatPointerEx@@YGJGPAJ&U
?IsValidTextA@@YGPAKDJ&U
?InstallEventA@@YGPAIPAH&U
?CrtProviderEx@@YGPADNPAFPAG&U
?RemoveStateOld@@YGDDJ&U
?FindArgumentA@@YGF_N&U
?FindDialogExW@@YGPAXPAHK&U
?GenerateCommandLineEx@@YGXHNPAD&U
?IsNotDeviceEx@@YGPAFPAHPADF&U
?ModifyFilePath@@YGPAG_NDMF&U
?InvalidateScreen@@YGX_N&U
?CallFolderNew@@YGGKPAJFJ&U
?ModifyHeightW@@YGPAJPAIPAGHG&U
?DeletePathExA@@YGHFPA_NM&U
?CopyListA@@YGXDG&U
?FormatStringExA@@YGMPAG&U
?EnumArgumentW@@YGHPAGPAF&U
?FormatWindowOriginal@@YGIPAIG&U
?AddExpression@@YGXGFK&U
?IsScreenExA@@YGXD&U
?FreeStringExA@@YGFPADHPAK&U
?KillDataOriginal@@YGPAHPAK&U
?FormatScreenExA@@YGPAKH&U
?InvalidateCharExW@@YGJIIPA_N&U
?GlobalOptionExA@@YGPAXGFM&U
?InvalidateProcessExA@@YGMPAIEKK&U
?IncrementCommandLineExA@@YGIF&U
?RemoveDeviceOld@@YGXN&U
?FreeListItemEx@@YGHJ&U
?RtlFileExA@@YGKPAGK&U
?IsStringW@@YGEG&U
?SectionExA@@YGGE&U
?SendProcessW@@YGFPAIIPAF&U
?ListItemA@@YGPANPAH&U
?ModifyPointerNew@@YGXGG&U
?KillScreenOriginal@@YGDPAHD&U
?KillMonitorW@@YGHEPAED&U
?InstallRectA@@YGFHMHF&U
?PutMediaTypeA@@YGHDD&U
?InstallWindow@@YGFE&U
?KillTextExA@@YGIFHF&U
?ValidateNameEx@@YGKNPAFE&U
?ShowListItemEx@@YGPAGNIPAM&U
?GlobalSystem@@YGXPAIK&U
?FreePenEx@@YGXHNMF&U
?RectNew@@YGHFPAJPAGPAE&U
?RtlCharExA@@YGIMNN&U
?AddObjectEx@@YGJJIFM&U
?PenExW@@YGXF&U
?FormatMutantOld@@YGMPAMPAGFF&U
?CopyTimeNew@@YGPANEPAMK&U
?DeleteHeightEx@@YGEEPAJG&U
?IsStringExA@@YGPAFHPAMHG&U
?FreeKeyNameExW@@YGME&U
?IncrementMutexEx@@YGPAXDEPAKPAD&U
?IsNotDeviceExA@@YGHEPAMPAH&U
?OnVersionExA@@YGDPAIPAFPAJ&U
?GenerateEventOriginal@@YGJPAK&U
?ArgumentExA@@YGPAHPADKPAH&U
?FreeWindowInfoA@@YGPAMJD&U
?InvalidateEventOld@@YGDF&U
?CloseRectOriginal@@YGPAF_NPAFDE&U
?InvalidateClassOld@@YG_N_NJPAI&U
?DecrementDialogExW@@YGDPAIH&U
?AddListItemExA@@YGMGGPAKF&U
?CopyAnchorExA@@YG_NPAH&U
?ValidateComponentOld@@YGGIGPAD&U
?CrtKeyNameExA@@YGXPAMHPAGK&U
?OnPointerNew@@YGPAMD&U
?FindConfigExW@@YGXKPAD&U
?RtlStateEx@@YGXPAHKG&U
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rimp Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdbg1 Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.redt Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rit Size: 1024B - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdbg2 Size: 512B - Virtual size: 97B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rvar Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rpt Size: 512B - Virtual size: 423B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hdata Size: 512B - Virtual size: 236B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ping Size: - Virtual size: 297KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ