e:\工程 C++\个人网站工具\Install\release\Install.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f65ab2323f6bce0780f14dcdd2588f91_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f65ab2323f6bce0780f14dcdd2588f91_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f65ab2323f6bce0780f14dcdd2588f91_JaffaCakes118
-
Size
76KB
-
MD5
f65ab2323f6bce0780f14dcdd2588f91
-
SHA1
017834fdf5fdbebe520bd2df9328edecc0b6fdc3
-
SHA256
9a075832f7478cf669f884058df2b7ab93910100154ca1ac58e59e9c29b89122
-
SHA512
6f19998bf5d673689b56b7c13261e56e6d4f543563ac0e66ce9331de0480b0c9001e026237687512f116ad003857a2f8d7b3fae1f1b1bc2d2a1025cceaad44f8
-
SSDEEP
768:+9qNgsYv6eWgcVTEKCNcrbwORqS8gPmU8u0Ru3RcvzKGb4oj1zNmuox2EPknhLQH:wLvpWgyTnrbwOMgnzfcvmk4Cb/7oet0h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f65ab2323f6bce0780f14dcdd2588f91_JaffaCakes118
Files
-
f65ab2323f6bce0780f14dcdd2588f91_JaffaCakes118.exe windows:4 windows x86 arch:x86
c0473799b9bf817aad704cd775824337
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
wininet
InternetCloseHandle
InternetReadFile
InternetOpenUrlW
InternetOpenW
kernel32
GetLastError
WritePrivateProfileStringW
FindResourceW
SizeofResource
LockResource
FindResourceExW
CreateProcessW
WaitForSingleObject
CloseHandle
LCMapStringW
LoadResource
GetCommandLineW
LCMapStringA
GetStringTypeW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetProcAddress
GetModuleHandleA
ExitProcess
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetStringTypeA
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
Sleep
CreateFileW
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
FlushFileBuffers
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
SetEndOfFile
ReadFile
CreateFileA
GetLocaleInfoA
advapi32
CloseServiceHandle
OpenServiceW
OpenSCManagerW
StartServiceW
shell32
SHGetSpecialFolderPathW
user32
UnregisterClassA
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 308B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ