C:\Users\Matthias\Desktop\Week07\Methods2\Debug\Methods2.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f5b9f2291560761a40d7357cef27263a_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f5b9f2291560761a40d7357cef27263a_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f5b9f2291560761a40d7357cef27263a_JaffaCakes118
-
Size
273KB
-
MD5
f5b9f2291560761a40d7357cef27263a
-
SHA1
64b90ee22ea5ef184a0cadf0d63262b535f8fad4
-
SHA256
d8d94b3b6f603599c98368dec839a633dff6f6fe523a88f34bf6033250ea2d14
-
SHA512
bfb9b8fa55d4de7f4926fe598219588652c7a74fd3cbdc420d7bd296ce31add0a18b9362bcd21fbf37a859fce44af8ba58c3e9a390ae0db88bfa232c4381dc48
-
SSDEEP
3072:sWHEtP0rJPBys2DkPVCaylpP36k0tGJ3jTMClcDUuf0AOezR:sWH/vokPVCaW13vgFecSAOez
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5b9f2291560761a40d7357cef27263a_JaffaCakes118
Files
-
f5b9f2291560761a40d7357cef27263a_JaffaCakes118.exe windows:5 windows x86 arch:x86
4db5afd58c37aa0a2cb26880beedec9d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
InterlockedCompareExchange
InterlockedExchange
EncodePointer
LoadLibraryW
HeapSetInformation
lstrlenA
RaiseException
IsDebuggerPresent
GetSystemTimeAsFileTime
GetStartupInfoW
DecodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
HeapFree
HeapAlloc
GetProcessHeap
GetModuleFileNameW
VirtualQuery
FreeLibrary
QueryPerformanceCounter
GetCurrentProcessId
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalReAlloc
OutputDebugStringW
MultiByteToWideChar
WideCharToMultiByte
DeleteTimerQueueTimer
CreateTimerQueueTimer
CreateDirectoryW
FindResourceW
LoadResource
LockResource
SizeofResource
CreateFileW
WriteFile
FreeResource
GetTickCount
GetCurrentThreadId
Sleep
WaitForSingleObject
CloseHandle
GetProcAddress
CreateThread
user32
SetRect
GetAsyncKeyState
WaitMessage
PostMessageW
MessageBoxA
MessageBoxW
SetFocus
EnumChildWindows
DrawTextW
GetWindowRect
DefWindowProcW
PostQuitMessage
SendMessageW
EndPaint
BeginPaint
LoadImageW
LoadBitmapW
GetWindowDC
DestroyWindow
MoveWindow
EnableWindow
CallWindowProcW
GetParent
PtInRect
GetCursorPos
LoadIconW
LoadCursorW
RegisterClassExW
CreateWindowExW
ShowWindow
UpdateWindow
EnumDisplaySettingsW
ChangeDisplaySettingsW
GetWindowLongW
SetWindowLongW
SetWindowPos
SetWindowRgn
GetSystemMetrics
ShowCursor
InvalidateRect
AttachThreadInput
PeekMessageW
TranslateMessage
DispatchMessageW
GetDC
GetClientRect
ReleaseDC
gdi32
RoundRect
Rectangle
Polyline
CreateSolidBrush
BeginPath
EndPath
StrokeAndFillPath
CreatePen
MoveToEx
LineTo
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
StretchBlt
DeleteDC
DeleteObject
Arc
Ellipse
Pie
SetBkMode
SetTextColor
TextOutW
GetObjectW
CreateFontIndirectW
CreateBitmap
SetDIBits
GetDIBits
SetBkColor
CreateRectRgn
CreateEllipticRgn
CreatePolygonRgn
CombineRgn
ExtCreateRegion
BitBlt
CreateDIBSection
OffsetRgn
GetRgnBox
PtInRegion
StrokePath
msvcp100d
?_DebugHeapTag_func@std@@YAABU_DebugHeapTag_t@1@XZ
??2@YAPAXIABU_DebugHeapTag_t@std@@PADH@Z
??3@YAXPAXABU_DebugHeapTag_t@std@@PADH@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?id@?$codecvt@DDH@std@@2V0locale@2@A
??Bid@locale@std@@QAEIXZ
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Incref@facet@locale@std@@QAEXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
?_Decref@facet@locale@std@@QAEPAV123@XZ
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Debug_message@std@@YAXPB_W0I@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
??Bios_base@std@@QBEPAXXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Getpfirst@_Container_base12@std@@QBEPAPAU_Iterator_base12@2@XZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_BADOFF@std@@3_JB
??1_Container_base12@std@@QAE@XZ
??0_Container_base12@std@@QAE@XZ
?_Orphan_all@_Container_base12@std@@QAEXXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
msimg32
AlphaBlend
TransparentBlt
winmm
mciSendStringW
timeGetTime
msvcr100d
_amsg_exit
__getmainargs
_exit
_XcptFilter
_cexit
exit
_ismbblead
_acmdln
_CrtSetCheckCount
_initterm
_initterm_e
_unlock
__dllonexit
_lock
_onexit
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_controlfp_s
_invoke_watson
__set_app_type
_fmode
_commode
__setusermatherr
__CxxFrameHandler3
??3@YAXPAX@Z
??2@YAPAXI@Z
srand
malloc
??_V@YAXPAX@Z
sqrt
tan
wcscpy_s
memset
_purecall
wcslen
strcpy_s
strlen
wcscat_s
_itoa_s
_ultoa_s
_gcvt_s
wcscmp
_wtoi
wcstod
memcpy
_invalid_parameter
_CrtDbgReportW
_lock_file
_unlock_file
fwrite
fputc
ungetc
memcpy_s
fgetc
fgetpos
_fseeki64
fsetpos
setvbuf
fflush
memmove
fclose
_CxxThrowException
free
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
rand
_CRT_RTC_INITW
_configthreadlocale
Sections
.textbss Size: - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ