D:\ObiJnUIFXkj\fxFpwvwAzIgKy\ycowBKEIjh.pdb
Static task
static1
Behavioral task
behavioral1
Sample
08facb1765e5c8cd0a3f467c1b90a3a0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
08facb1765e5c8cd0a3f467c1b90a3a0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
08facb1765e5c8cd0a3f467c1b90a3a0_JaffaCakes118
-
Size
212KB
-
MD5
08facb1765e5c8cd0a3f467c1b90a3a0
-
SHA1
3bf1d0363dc31d80f8756a9f7f36e585aa136de6
-
SHA256
b51f206f87868596200d6641c76abf476ba09a91c4a890dbec93c4902c8882c3
-
SHA512
ebd816117f8dbfe5773a8adff7776e9a07e4db2374c6746da90fd473819d37175a3b3db85cc32a5bff345eeac60d0b37887a1c6f851c81b087e78be0df165726
-
SSDEEP
6144:Ycybd1JpJsmCcmXUP6gNYEt3/xLe5zJtPZiC0:Ycybd1JrsLcG1gxxxyzJm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08facb1765e5c8cd0a3f467c1b90a3a0_JaffaCakes118
Files
-
08facb1765e5c8cd0a3f467c1b90a3a0_JaffaCakes118.exe windows:5 windows x86 arch:x86
4e897cf3b76864034e29ec95055bc74a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
exit
gdi32
OffsetViewportOrgEx
GetMapMode
MoveToEx
GetObjectA
CreatePalette
SetDIBits
LineTo
StartPage
CreatePenIndirect
ExtFloodFill
GetClipBox
SetBitmapBits
CreateDIBitmap
kernel32
GetStartupInfoA
GetUserDefaultUILanguage
lstrcmpiW
CallNamedPipeW
RegisterWaitForSingleObject
lstrcmpW
HeapReAlloc
GetThreadLocale
GetThreadTimes
LoadLibraryA
CompareStringW
HeapAlloc
GetCurrentDirectoryW
lstrlenW
GetFileAttributesA
WaitForMultipleObjects
EnumResourceNamesW
shlwapi
StrFormatByteSizeA
UrlGetPartW
ChrCmpIA
PathSearchAndQualifyA
StrToIntA
ntdll
memset
user32
ValidateRect
GetKeyboardLayoutList
InsertMenuItemW
CheckMenuItem
GetCursorPos
GetSubMenu
PostQuitMessage
DestroyAcceleratorTable
GetDlgCtrlID
IntersectRect
GetMessageExtraInfo
GetUserObjectInformationA
SetMenuItemInfoW
ChildWindowFromPointEx
CharLowerA
SetUserObjectInformationW
SendDlgItemMessageA
MoveWindow
DrawAnimatedRects
CallWindowProcW
SetWindowPos
DrawTextA
EndDialog
OffsetRect
DrawEdge
SetClassLongW
DrawTextW
ActivateKeyboardLayout
Exports
Exports
?nctsY_XU__BBvoyq@@YGKPAG@Z
?iy_IJnk_@@YGPAGFI@Z
?LB_BXIt@@YGXGI@Z
?esphU_VSFJXhx__c__q@@YGPAGPAEF@Z
?XKFCgewSITHQLi@@YGEEPAM@Z
?XFvuxdt_XT_@@YGPAXJ@Z
?Aqqi_SNCIuramQSW_YA@@YGPAI_N@Z
?_s__himaHL_AGQ_DCV@@YGPAMHPAH@Z
?iwe_n__PKFJRDCINR@@YGGH@Z
?jfU_TE_n_prlHJFRf@@YG_NI@Z
?XNx_kzv_PJZrygyAE_PBK@@YGX_NPAG@Z
?_UKH___T_GGDyjxpna@@YGHDF@Z
?NZ_HP_PO_HOLXQS_TPV_U_@@YGNIPAD@Z
?_ujcXAAuxiit@@YGFN_N@Z
?RVkcoGB@@YGPAKPANI@Z
?UB_HBAVEJBoihccENS__@@YGXPAHI@Z
?SBOER_EI@@YGHFF@Z
?NEeh_alqwPUXbIP_Lx@@YGKH@Z
?_SJNRj_c@@YGPAIMD@Z
?XS__EDAbtw@@YGEF@Z
?tuxeKEMVR__KG_F_@@YGEG@Z
?DLP_RO_tBC@@YGPAXIJ@Z
?BT__Bkdtyu@@YGI_N@Z
?zqmnal__YP@@YGJD@Z
?_ISmsyhoNBJNIEMK@@YGPAMPAE@Z
?SUWOvgvh_t_fx__w@@YGPAKPA_N@Z
?bakTIGrt__pmqwoozfqnY@@YG_NH@Z
?LKBmv_w_k_n__qc_k@@YGPAGG@Z
?dg_mjvukzr_ZR@@YGXMK@Z
?DKall_j_i@@YGPAXM@Z
?f_zycxh_TIqkvhp@@YGFF@Z
?p_klmG_ZOO_LMX_JEZNIQA@@YGGPAI@Z
?U_OC_RCKo_fokwMGBp_qdu@@YGPAFPAED@Z
?brsxOOD_CWS@@YGPAJG@Z
?x__jyquvbjons__zj_@@YGPAMI@Z
?__Bjcs_nbZZH_UH_UMaiu_@@YGPAJH@Z
?ccawXYFDV__pimujuq__zt@@YGII@Z
?As__ho_hmj__QUcdA@@YGPAKFD@Z
?clwr_wja_@@YGFPAI_N@Z
?BPQsv_DFdva_@@YGJE@Z
?cmidlminqhk_cbazq@@YGKN@Z
?_az_cp_z@@YGDPAGD@Z
?M__NDA_P_dOXIVo__xh_n@@YGPAJE@Z
?_ZgxiukN_AU_Qg_x_qd@@YGM_NH@Z
?WP_Z_X_CbeYEhCI@@YGPADJN@Z
?_gixpJRJ_T___NL_YS@@YGXJ@Z
?rii_ECR_Umjunwh@@YGPADG@Z
?CMK_ACQH_h@@YGXN@Z
?OHEN_MAEOR___WT_Z_vj@@YGHJPAH@Z
?F_Mdkqg_wx_mnZ_@@YGM_N@Z
?KTEL__VV@@YGPAID@Z
?CX_GMHk_DMZTzusc@@YGPAFDPAJ@Z
?jf_ACXHFl@@YGPAGE@Z
?ZMDJ_X__PBEkH_WZ_VVBRk@@YGGI@Z
?ovct_m__aeuqk_p_B@@YGPAXG@Z
?snkSA_GFXHQZ_Qjbdp_@@YGEPAHPAM@Z
?__mwio_XXZJ_t@@YGPANM@Z
?gtbkpRJZN@@YGGD@Z
?ynuyIdH@@YGGF@Z
Sections
.text Size: 126KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 60KB - Virtual size: 460KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 473B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ