D:\work\Adcontent\IconPack-new\Release\IconPack.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f320cde278de2e62c7a907b3db5982b0_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f320cde278de2e62c7a907b3db5982b0_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f320cde278de2e62c7a907b3db5982b0_JaffaCakes118
-
Size
3.7MB
-
MD5
f320cde278de2e62c7a907b3db5982b0
-
SHA1
09adede25a40a1a968308a9cecc8f7715329b0d6
-
SHA256
d78a8dabe4ba4708f086705ac138377c65443c9ffe102b82b3ee80ec3dadf379
-
SHA512
60223442a567fe58f1a50c9d0fb2a49d7d013dd94956b78c44f77da7e4cd1b54104b37971946372abf6ed2cd2fac420a82335b921072dee22e68d6afd8997b5c
-
SSDEEP
98304:nBYdv4iseFqx7x2Ig1nOV+eFqx7x2Ig1nOVEM9zAmjue5:n2dv4ismgQBG+mgQBGRJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f320cde278de2e62c7a907b3db5982b0_JaffaCakes118
Files
-
f320cde278de2e62c7a907b3db5982b0_JaffaCakes118.exe windows:5 windows x86 arch:x86
327765ddb152c212f0df20c5cb53082e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
HeapSize
GetProcessHeap
RaiseException
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
WaitForSingleObject
LoadResource
SizeofResource
ReadFile
CloseHandle
GetTickCount
GetModuleFileNameW
GetModuleHandleW
HeapFree
FindResourceW
FindResourceExW
GetTempPathW
CreateFileW
GetComputerNameA
MultiByteToWideChar
WriteFile
IsBadReadPtr
ReadConsoleW
WriteConsoleW
FlushFileBuffers
HeapReAlloc
HeapAlloc
HeapDestroy
LockResource
CreateProcessW
DecodePointer
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
GetStringTypeW
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
EncodePointer
RtlUnwind
FreeLibrary
GetProcAddress
LoadLibraryExW
GetCommandLineA
IsProcessorFeaturePresent
ExitProcess
GetModuleHandleExW
AreFileApisANSI
WideCharToMultiByte
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetCurrentThreadId
GetStdHandle
GetFileType
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LCMapStringW
SetEndOfFile
user32
wsprintfA
oleaut32
SysAllocStringLen
wininet
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
Sections
yihwlbbp Size: 113KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
xrmzkvpg Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
vgmwtebz Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mdbwkrrg Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
cpnawqxq Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ