y:\test4\e88\Debug\e88.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e888b643e0e9ccae41d490073c2b894d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e888b643e0e9ccae41d490073c2b894d_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e888b643e0e9ccae41d490073c2b894d_JaffaCakes118
-
Size
1.0MB
-
MD5
e888b643e0e9ccae41d490073c2b894d
-
SHA1
55e794c13698cb6fbbdfece50c2c2da970196248
-
SHA256
02f48e173bd854625770bace82c292144e5add6c0a7adbe12d217a72ff7b093f
-
SHA512
c6b9d32ae208f1185829cd40145feeda1db9722c982bde331e7dcf667c0c52d2a627d95a08bf66ba9bf40408c2da29ce9a55f6d373372f277607d12aa5f51f8a
-
SSDEEP
12288:CD7tigZbqQA8ingJ05+LRjrikMCGzKzEoepu1VCFlmJ:CDZJZbePGoZzKX1VCFwJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e888b643e0e9ccae41d490073c2b894d_JaffaCakes118
Files
-
e888b643e0e9ccae41d490073c2b894d_JaffaCakes118.exe windows:4 windows x86 arch:x86
b1e2697054fd16628033ae068f25c806
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetLocalTime
GetProcAddress
LoadLibraryExW
LCMapStringA
GetOEMCP
GetACP
CloseHandle
GetModuleHandleA
GetStartupInfoW
GetVersionExA
TerminateProcess
GetCurrentProcess
ExitProcess
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
GetModuleFileNameA
WriteFile
IsBadWritePtr
IsBadReadPtr
HeapValidate
HeapAlloc
VirtualAlloc
HeapReAlloc
VirtualQuery
InterlockedExchange
LoadLibraryA
DebugBreak
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
SetConsoleCtrlHandler
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
SetFilePointer
WideCharToMultiByte
VirtualProtect
GetSystemInfo
GetLocaleInfoA
GetCPInfo
SetStdHandle
FlushFileBuffers
LCMapStringW
user32
MessageBoxA
oleaut32
SysAllocStringByteLen
Sections
.rda5234 Size: 192KB - Virtual size: 190KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 388KB - Virtual size: 386KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ