monkapew.pdb
Static task
static1
Behavioral task
behavioral1
Sample
38ec375af641d96173558e009bd25680_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
38ec375af641d96173558e009bd25680_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
38ec375af641d96173558e009bd25680_JaffaCakes118
-
Size
100KB
-
MD5
38ec375af641d96173558e009bd25680
-
SHA1
7f7c271793d8c70639e9d0e898dc39fca1dc2692
-
SHA256
510c2790f4007532d0ee8cd8d6290bce0dc14b3297071c974dcc1286512103e3
-
SHA512
571ffca66b10a6ab1e0345e6a175d0ca2b028c8f2cf3a31a2ec0a116f7f670e2478f6d0a46321bdf2951203a9a3ff709b065e2a023946c25f478ebb1f78f07ce
-
SSDEEP
384:rfoTgyXteQrQBFE/oArM1q4ZKziGbSrtMbjmeQW+YA:ebXte2KEQx44ZK+W+tMbjoz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38ec375af641d96173558e009bd25680_JaffaCakes118
Files
-
38ec375af641d96173558e009bd25680_JaffaCakes118.exe windows:4 windows x86 arch:x86
39be525feecb005ad3440c7707824ce4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
wtsapi32
WTSQueryUserToken
WTSFreeMemory
WTSEnumerateSessionsA
WTSRegisterSessionNotification
WTSVirtualChannelClose
WTSLogoffSession
WTSVirtualChannelQuery
WTSSendMessageA
WTSUnRegisterSessionNotification
WTSVirtualChannelOpen
WTSSetUserConfigW
WTSCloseServer
WTSQuerySessionInformationA
WTSOpenServerA
WTSEnumerateServersA
untfs
Recover
Format
FormatEx
Extend
shlwapi
UrlIsNoHistoryA
UrlCombineA
UrlCompareA
UrlIsOpaqueA
PathCombineA
UrlGetLocationA
UrlUnescapeA
UrlHashA
UrlCanonicalizeA
UrlIsA
UrlGetPartA
UrlEscapeA
PathCommonPrefixA
UrlCreateFromPathA
dbnmpntw
ConnectionVer
ConnectionWrite
ConnectionClose
ConnectionError
ConnectionRead
kernel32
GetCurrentThreadId
CreateDirectoryA
CompareStringW
CreateMutexA
TlsGetValue
CreateSemaphoreW
IsValidLocale
FoldStringW
HeapCreate
GetCurrentDirectoryA
WriteProcessMemory
GetDateFormatW
CreateNamedPipeW
GetConsoleAliasW
GetProcessHeap
GetTimeFormatA
GetNumberFormatA
LoadLibraryA
GetSystemInfo
SetEnvironmentVariableA
ExpandEnvironmentStringsA
GetEnvironmentVariableA
SleepEx
GetPrivateProfileIntA
GetTickCount
GetDiskFreeSpaceA
GetAtomNameA
CloseHandle
FormatMessageA
WriteFile
GetComputerNameA
CopyFileA
InterlockedExchange
CreateEventA
user32
DrawIcon
IsWindow
CreateWindowExW
GetCaretPos
CharToOemA
SetCursorPos
SetFocus
GetMessageA
LoadImageW
wsprintfA
DialogBoxParamW
authz
AuthzFreeResourceManager
AuthzFreeContext
Sections
.text Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ