C:\jev-yuxec.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f75321be65ccd1fb27f978e8ec360738_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f75321be65ccd1fb27f978e8ec360738_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f75321be65ccd1fb27f978e8ec360738_JaffaCakes118
-
Size
14.7MB
-
MD5
f75321be65ccd1fb27f978e8ec360738
-
SHA1
60cefa28535cc8f77cc1b8e6aaf03ba6762f5e38
-
SHA256
d9cc026783b0511da70d785bbd3093e11bb0927115bc7409d25b1c9ae3d1e7e1
-
SHA512
81e650c4e50195dadec6f1bde08c4296cf1938fbe7563bd5598f824558e047dcc0030c0e9d99ec89ea41c4905c309254e8717c4e910470afd4d95a7bd6e5ff22
-
SSDEEP
12288:GRXQK44fy611111111111111111111111111111111111111111111111111111H:GRx2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource f75321be65ccd1fb27f978e8ec360738_JaffaCakes118
Files
-
f75321be65ccd1fb27f978e8ec360738_JaffaCakes118.exe windows:5 windows x86 arch:x86
7799a59ba272e2d352ce8955d6600f5f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB Paths
Imports
kernel32
ExpandEnvironmentStringsA
GetNumaProcessorNode
lstrlenA
FindClose
LocalAlloc
ExitThread
GetVolumePathNamesForVolumeNameA
GetLastError
LoadLibraryA
lstrcatW
GetCommState
TerminateProcess
GetProcessHeaps
CreateThread
GetCurrencyFormatW
SetThreadIdealProcessor
GetWindowsDirectoryW
GetProcAddress
ExitProcess
TlsGetValue
_lclose
DosDateTimeToFileTime
GetTickCount
IsDebuggerPresent
VirtualQueryEx
GetNumberOfConsoleMouseButtons
lstrcpyA
GetHandleInformation
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
SetLastError
RtlUnwind
RaiseException
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleExW
GetACP
HeapFree
HeapAlloc
CloseHandle
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
SetStdHandle
GetFileType
GetStringTypeW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
DecodePointer
CreateFileW
Sections
.text Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 168KB - Virtual size: 47.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfids Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14.4MB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ