C:\cygwin64\home\buildslave\r\workdir\LinkTarget\Executable\twain32shim.pdb
Static task
static1
Behavioral task
behavioral1
Sample
026cac08365eb0a63bd8f12825a8cecd_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
026cac08365eb0a63bd8f12825a8cecd_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
026cac08365eb0a63bd8f12825a8cecd_JaffaCakes118
-
Size
1.3MB
-
MD5
026cac08365eb0a63bd8f12825a8cecd
-
SHA1
76ba6f86911ac5ef07431504fecead4df7024e41
-
SHA256
783ab9a02246f9d8455b7b630a86e86342ba523f4ae20d25f8ee33de4d3e4e63
-
SHA512
134f846485c2d0ea1188438019862d38c0c46ceb2af170bd0ae446b7183d2d45fef83357eb58e4367cdde2c070dfb52bc997c5173bbdb7e47f114b8fe6546ce8
-
SSDEEP
12288:auZXViF2tSiQyuUNFt+S1W3VX86avEF8JMkKv:Tic8iHNFp1WFXVav9MkO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 026cac08365eb0a63bd8f12825a8cecd_JaffaCakes118
Files
-
026cac08365eb0a63bd8f12825a8cecd_JaffaCakes118.exe windows:6 windows x86 arch:x86
628a4cacd2364def90d74f2f62887fec
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ole32
CoTaskMemFree
shell32
SHGetKnownFolderPath
CommandLineToArgvW
user32
GetClassNameW
SetWindowLongW
GetWindowLongW
MsgWaitForMultipleObjects
UnhookWindowsHookEx
DestroyWindow
CallNextHookEx
RegisterClassW
PostQuitMessage
DefWindowProcW
PostThreadMessageW
PostMessageW
PeekMessageW
DispatchMessageW
TranslateMessage
SetWindowsHookExW
CreateWindowExW
msvcp140
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_W_Getmonths@_Locinfo@std@@QBEPBGXZ
?_W_Getdays@_Locinfo@std@@QBEPBGXZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
_Mbrtowc
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?uncaught_exception@std@@YA_NXZ
kernel32
GlobalSize
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LocalFree
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
LoadLibraryW
GetProcAddress
GetModuleHandleW
FreeLibrary
UnmapViewOfFile
FlushViewOfFile
MapViewOfFile
CreateFileMappingW
OpenProcess
GetProcessIdOfThread
GetThreadId
GetCurrentThreadId
GetCurrentProcess
GetLastError
DuplicateHandle
CloseHandle
GetCommandLineW
vcruntime140
_except_handler4_common
__current_exception_context
__std_terminate
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__CxxFrameHandler3
memcpy
memmove
__std_type_info_destroy_list
__current_exception
memset
api-ms-win-crt-runtime-l1-1-0
_set_app_type
_configure_wide_argv
_initialize_wide_environment
_get_wide_winmain_command_line
_initterm
_initterm_e
exit
_exit
terminate
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_seh_filter_exe
_crt_atexit
_controlfp_s
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_at_quick_exit
api-ms-win-crt-string-l1-1-0
strncpy
api-ms-win-crt-heap-l1-1-0
free
calloc
malloc
_callnewh
_set_new_mode
api-ms-win-crt-convert-l1-1-0
wcstoul
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__acrt_iob_func
__p__commode
__stdio_common_vfprintf
api-ms-win-crt-math-l1-1-0
__setusermatherr
floor
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ