d:\uzsg\efopkmzlee.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0a4d55a1591cb9449fb324e8ef8b7234_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0a4d55a1591cb9449fb324e8ef8b7234_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0a4d55a1591cb9449fb324e8ef8b7234_JaffaCakes118
-
Size
536KB
-
MD5
0a4d55a1591cb9449fb324e8ef8b7234
-
SHA1
47644908529bd221c5174619c2b1d60fb1274410
-
SHA256
348987367150deb9ffff0a6cb1b4cb3633cc4e4e670d6b16e7fc495fa3d1b0a9
-
SHA512
9e2714bd23c19e4bea0cada56f069bbe0f773d917719fd58bb0321b0b02e5ae59c572fd12c2203e1facc66a1922972ac698ba65aa3479c8fb888c182787a63ee
-
SSDEEP
6144:QXZMZqCJdNoQFGpFP5EHIooJjay/v8XyN+54EibUiUZZEWMZ3jbk1lMSVGOPWhos:QXWgSCRootp8qUoYiUsSXJVbPCMQ+A2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a4d55a1591cb9449fb324e8ef8b7234_JaffaCakes118
Files
-
0a4d55a1591cb9449fb324e8ef8b7234_JaffaCakes118.exe windows:4 windows x86 arch:x86
fc5f064c2caf6787063a2022dfaedb3a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ole32
StgCreateDocfile
OleSetMenuDescriptor
OleCreateLinkFromData
OleSave
OleIsRunning
OleCreateFromFile
OleCreateLinkToFile
OleCreate
OleGetIconOfClass
OleSetClipboard
mfc42
ord1576
gdi32
Arc
CreatePenIndirect
SelectClipRgn
GetCharWidthFloatA
ExtCreateRegion
GetBkColor
AbortDoc
GetCharABCWidthsFloatA
ScaleWindowExtEx
AbortPath
SetWindowOrgEx
CreateICA
StartPage
SetArcDirection
GetKerningPairsA
GetStretchBltMode
GetNearestColor
GetStockObject
PaintRgn
GetObjectType
GetAspectRatioFilterEx
ExtEscape
EnumMetaFile
SelectPalette
ScaleViewportExtEx
BeginPath
GetMapMode
CreateDiscardableBitmap
RectVisible
Chord
CreatePen
PolylineTo
PlayEnhMetaFile
EndPage
DPtoLP
WidenPath
Polyline
SetViewportOrgEx
SetPolyFillMode
GetTextCharacterExtra
ArcTo
FrameRgn
CreateDCA
GetCurrentPositionEx
CreateFontA
UpdateColors
ExtFloodFill
CreatePolygonRgn
LineTo
ResetDCA
FloodFill
SetBoundsRect
SetMapperFlags
CreateRectRgn
GetBkMode
GetCurrentObject
CreateEnhMetaFileA
GetDCOrgEx
GetWindowOrgEx
GetTextFaceA
CreateSolidBrush
OffsetRgn
AnimatePalette
CloseEnhMetaFile
GetObjectA
GetPaletteEntries
PolyDraw
GetWindowExtEx
CreateEllipticRgnIndirect
PlgBlt
RoundRect
Ellipse
SetBkColor
GetViewportExtEx
GetTextExtentPoint32A
SelectObject
CreateDIBPatternBrushPt
DeleteObject
SetMapMode
GetPixel
SelectClipPath
Pie
SetMiterLimit
FlattenPath
GetPolyFillMode
PatBlt
GetTextColor
ExtSelectClipRgn
AngleArc
PlayMetaFileRecord
GetBrushOrgEx
GetROP2
EnumObjects
GetRegionData
StartDocA
SetBkMode
GetViewportOrgEx
SetColorAdjustment
OffsetWindowOrgEx
GetGlyphOutlineA
MaskBlt
CreatePolyPolygonRgn
GetPath
EndPath
EndDoc
GetDeviceCaps
SetROP2
GetColorAdjustment
PolyBezier
GdiComment
DrawEscape
CreateBitmap
ResizePalette
GetTextMetricsA
GetClipBox
GetCharWidthA
SetTextColor
GetMiterLimit
comctl32
ImageList_Replace
ImageList_LoadImageA
_TrackMouseEvent
ImageList_Add
PropertySheetA
ord17
ImageList_DragEnter
ImageList_AddMasked
ImageList_GetImageCount
ImageList_Destroy
ImageList_Remove
ImageList_GetIcon
CreatePropertySheetPageA
ImageList_EndDrag
ImageList_DragMove
ImageList_GetImageInfo
ImageList_DragLeave
comdlg32
GetOpenFileNameW
PrintDlgW
user32
SetRectEmpty
RegisterWindowMessageW
RemoveMenu
IsWindow
GetDlgItemInt
AdjustWindowRectEx
FrameRect
IsClipboardFormatAvailable
TranslateMessage
EnableWindow
GetLastActivePopup
SetScrollPos
WindowFromPoint
RegisterClassW
EnumWindows
GetAsyncKeyState
DrawIconEx
TranslateAcceleratorW
SetMenu
SetScrollInfo
LoadAcceleratorsW
GetSystemMetrics
GetClassLongW
CallWindowProcW
SetForegroundWindow
EndDialog
GetWindowLongW
GetScrollPos
CallNextHookEx
SetCapture
GetFocus
GetIconInfo
MessageBoxW
GetSysColorBrush
GetWindowThreadProcessId
GetParent
GetClientRect
ModifyMenuW
DrawFrameControl
DestroyIcon
GetSystemMenu
GetMenuItemID
DrawFocusRect
BeginDeferWindowPos
LoadStringW
DrawIcon
GetWindowRect
GetForegroundWindow
IsWindowEnabled
DeleteMenu
SetDlgItemInt
UnregisterClassW
ScrollWindowEx
GetCursorPos
DestroyWindow
OpenClipboard
SetParent
GetCapture
DeferWindowPos
GetMenuState
BeginPaint
InsertMenuW
WaitMessage
SetMenuItemBitmaps
GetClassInfoExW
ValidateRect
ReleaseDC
AttachThreadInput
IsDlgButtonChecked
GetActiveWindow
UnhookWindowsHookEx
GetWindowPlacement
GetMessagePos
wsprintfW
SetTimer
GetMessageTime
IsDialogMessageW
SetWindowPlacement
CheckMenuItem
GetDoubleClickTime
GetKeyState
DrawEdge
InflateRect
DestroyCursor
PostMessageW
ScrollWindow
GetScrollInfo
CreateDialogIndirectParamW
SetDlgItemTextW
SetWindowRgn
IntersectRect
FindWindowW
OffsetRect
EmptyClipboard
DrawTextW
GetMenuItemCount
SystemParametersInfoW
IsChild
DefWindowProcW
SetWindowTextW
TrackPopupMenuEx
CloseClipboard
LoadBitmapW
ReleaseCapture
EqualRect
DrawMenuBar
ScreenToClient
GetDC
IsMenu
GetDesktopWindow
GetClassInfoW
GetMenuDefaultItem
GetMenu
SendDlgItemMessageW
SetClipboardData
PtInRect
EndDeferWindowPos
InsertMenuItemW
GetMenuStringW
SetActiveWindow
EnableMenuItem
LoadIconW
LoadCursorW
SetMenuItemInfoW
SendDlgItemMessageA
IsWindowVisible
GetWindowDC
GetClipboardData
EnumChildWindows
BringWindowToTop
MapWindowPoints
RegisterClipboardFormatW
GetDlgItem
DestroyAcceleratorTable
GetNextDlgTabItem
PeekMessageW
GetNextDlgGroupItem
GetDlgCtrlID
ClientToScreen
LoadImageW
SetCursor
IsRectEmpty
GetMenuItemInfoW
UpdateWindow
CopyRect
CreatePopupMenu
MoveWindow
GetMessageW
FillRect
CreateWindowExW
SetFocus
ShowWindow
SetMenuDefaultItem
GetWindow
IsIconic
RedrawWindow
UnregisterClassA
SendMessageW
MessageBeep
InvalidateRgn
LockWindowUpdate
IsZoomed
MapDialogRect
RegisterClassExW
InvalidateRect
KillTimer
SetWindowPos
GetSysColor
GetSubMenu
GetWindowTextLengthW
SetRect
SystemParametersInfoA
GetTopWindow
PostQuitMessage
UnionRect
EndPaint
ReuseDDElParam
ShowOwnedPopups
ShowScrollBar
DestroyMenu
LoadMenuW
TrackPopupMenu
AppendMenuW
advapi32
RegOpenKeyExA
AllocateAndInitializeSid
RegQueryValueExA
RegEnumKeyExA
OpenSCManagerA
QueryServiceConfigA
GetUserNameA
RegCloseKey
RegEnumKeyA
shlwapi
PathAppendA
PathFindExtensionA
PathRelativePathToA
PathRemoveArgsA
PathFindFileNameA
PathMakePrettyA
PathQuoteSpacesA
PathParseIconLocationA
PathRemoveExtensionA
PathCanonicalizeA
PathIsUNCA
PathStripToRootA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
kernel32
GetStringTypeW
RaiseException
HeapReAlloc
GetModuleFileNameW
HeapDestroy
IsBadCodePtr
SetFilePointer
WideCharToMultiByte
GetFileType
GetTimeZoneInformation
GetCurrentProcess
VirtualFree
LoadLibraryA
CreateMutexW
SetEnvironmentVariableA
MultiByteToWideChar
InterlockedDecrement
ExitProcess
WriteFile
InterlockedIncrement
GetEnvironmentStrings
GetStartupInfoA
TlsAlloc
GetModuleHandleA
QueryPerformanceCounter
TlsGetValue
GetModuleHandleW
ReadFile
GetLocalTime
GetCurrentThreadId
GlobalUnlock
LoadLibraryW
SetStdHandle
GetEnvironmentStringsW
GetTickCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStringTypeA
GetLastError
GetSystemTimeAsFileTime
InterlockedExchange
FreeEnvironmentStringsA
GetStartupInfoW
GetModuleFileNameA
GetCurrentProcessId
LeaveCriticalSection
CompareStringW
GetStdHandle
GetSystemTime
TlsSetValue
HeapAlloc
RtlUnwind
CloseHandle
SetLastError
HeapFree
VirtualQuery
GetVersion
ResetEvent
TerminateProcess
LCMapStringA
FlushFileBuffers
ConvertDefaultLocale
CompareStringA
DuplicateHandle
FreeLibrary
GetProcAddress
LCMapStringW
GetCPInfo
FreeEnvironmentStringsW
DeleteCriticalSection
SetHandleCount
EnterCriticalSection
HeapCreate
InitializeCriticalSection
GetCommandLineA
GetCommandLineW
VirtualAlloc
Sections
.text Size: 76KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 268KB - Virtual size: 267KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ