C:\jev-yuxec.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f5fc0244fac4d1134685531500b89a07_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f5fc0244fac4d1134685531500b89a07_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f5fc0244fac4d1134685531500b89a07_JaffaCakes118
-
Size
11.7MB
-
MD5
f5fc0244fac4d1134685531500b89a07
-
SHA1
5e378f0c50c6680eb17f41939ea0e2859a16cf46
-
SHA256
914014bdfa54711f0be7ff00b7438aa023468c87494e7ec207ae9f3e543f3d69
-
SHA512
f1d3e9924913692e495c3268814202b6d6c6598cdbcde0b21f9b34f058a25ef744f8bc814bb7a2df1c73ea25a659e7a1ed2bd77b9be83742e0870875b334c769
-
SSDEEP
12288:TRXQK44fy611111111111111111111111111111111111111111111111111111H:TRx2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5fc0244fac4d1134685531500b89a07_JaffaCakes118
Files
-
f5fc0244fac4d1134685531500b89a07_JaffaCakes118.exe windows:5 windows x86 arch:x86
7799a59ba272e2d352ce8955d6600f5f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB Paths
Imports
kernel32
ExpandEnvironmentStringsA
GetNumaProcessorNode
lstrlenA
FindClose
LocalAlloc
ExitThread
GetVolumePathNamesForVolumeNameA
GetLastError
LoadLibraryA
lstrcatW
GetCommState
TerminateProcess
GetProcessHeaps
CreateThread
GetCurrencyFormatW
SetThreadIdealProcessor
GetWindowsDirectoryW
GetProcAddress
ExitProcess
TlsGetValue
_lclose
DosDateTimeToFileTime
GetTickCount
IsDebuggerPresent
VirtualQueryEx
GetNumberOfConsoleMouseButtons
lstrcpyA
GetHandleInformation
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
SetLastError
RtlUnwind
RaiseException
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleExW
GetACP
HeapFree
HeapAlloc
CloseHandle
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
SetStdHandle
GetFileType
GetStringTypeW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
DecodePointer
CreateFileW
Sections
.text Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 168KB - Virtual size: 47.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfids Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11.4MB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ