y:\test4\e104\Debug\e104.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f3b3dc27e2aa45d66ac7dce0eeb791eb_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f3b3dc27e2aa45d66ac7dce0eeb791eb_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f3b3dc27e2aa45d66ac7dce0eeb791eb_JaffaCakes118
-
Size
1.5MB
-
MD5
f3b3dc27e2aa45d66ac7dce0eeb791eb
-
SHA1
5ad250badf61ef433825efdf6ec9675f60e96637
-
SHA256
ba0bf94d4febc4e53f559f34fe4c1a455b2a4c12215ff57ec6993d2f6151baa4
-
SHA512
e4f0b90059d2997f9821998c011b33b9b33410caf2206dc264aee52f2fb94ad71baac3731dfbdbdeb643b3a1a5c8b26bce146dac3e1b2f4170ce52b279c95c93
-
SSDEEP
6144:wlh98W0agwM4nirwS5/NllSuWF5KvQ8HWPE4YMqxPM+iSP2Re8J2:w/9f0agvnLOuiAI82PE7MqZqk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3b3dc27e2aa45d66ac7dce0eeb791eb_JaffaCakes118
Files
-
f3b3dc27e2aa45d66ac7dce0eeb791eb_JaffaCakes118.exe windows:4 windows x86 arch:x86
e4dc10acd5ea1372d4e28c0c8fe74449
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
FileTimeToSystemTime
GetSystemTimeAsFileTime
GetLocalTime
GetProcAddress
LoadLibraryExW
VirtualProtect
GetLocaleInfoA
GetModuleHandleA
GetStartupInfoW
GetVersionExA
RaiseException
LoadLibraryA
DebugBreak
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
CloseHandle
GetProcessHeap
FreeLibrary
VirtualAlloc
HeapReAlloc
IsBadWritePtr
RtlUnwind
InterlockedExchange
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetStringTypeA
GetStringTypeW
LCMapStringA
WideCharToMultiByte
LCMapStringW
HeapSize
GetACP
GetOEMCP
GetCPInfo
GetSystemInfo
oleaut32
SysAllocStringByteLen
Sections
.rda1831 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 108KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 184KB - Virtual size: 233KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE