C:\sidasi-t.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fcff70f4c751ff498a183843ae379351_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fcff70f4c751ff498a183843ae379351_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fcff70f4c751ff498a183843ae379351_JaffaCakes118
-
Size
10.5MB
-
MD5
fcff70f4c751ff498a183843ae379351
-
SHA1
9178bf92b5b7592633f8a21bd7729b5158e99a44
-
SHA256
a432105cad3627783fdfab8246f6a09d7d97c796f899dd23af669d46a174a898
-
SHA512
d3523328c186339249ed273d086b053c6035eb7f7d0deaf67377f8d7e14ff324c6a098360c84be07872a1c8b7ad85029a630f7cb52bfdeeab01e8baa55eebc87
-
SSDEEP
12288:sc8EvSAInj67ygU57H7zKEVlM++++++++++++++++++++++++++++++++++++++G:s0vSAImHU5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcff70f4c751ff498a183843ae379351_JaffaCakes118
Files
-
fcff70f4c751ff498a183843ae379351_JaffaCakes118.exe windows:5 windows x86 arch:x86
123708792297e850a475b64837725c34
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetComputerNameA
SearchPathW
FindFirstFileW
CopyFileExW
TlsGetValue
GetDriveTypeW
GetNumberOfConsoleInputEvents
FindResourceExW
CallNamedPipeA
LoadResource
InterlockedIncrement
InitializeSListHead
CreateDirectoryW
GlobalLock
SetComputerNameW
GetCommProperties
FreeEnvironmentStringsA
SetTapeParameters
GetModuleHandleW
GenerateConsoleCtrlEvent
GetConsoleAliasesLengthA
GetPrivateProfileStringW
GetCommandLineA
GetSystemWow64DirectoryA
CreateDirectoryExW
InitializeCriticalSection
GlobalAlloc
AddRefActCtx
GetVolumeInformationA
ReadFileScatter
GetSystemWindowsDirectoryA
GetSystemTimeAdjustment
GetVersionExW
GlobalFlags
TerminateProcess
IsDBCSLeadByte
ReadFile
GetBinaryTypeW
CompareStringW
lstrlenW
SetConsoleTitleA
LCMapStringA
VerifyVersionInfoW
InterlockedExchange
GetFileSizeEx
GetCurrentDirectoryW
GetProcAddress
SetVolumeLabelW
WriteProfileSectionA
FreeUserPhysicalPages
BuildCommDCBW
OpenWaitableTimerA
GetLocalTime
LoadLibraryA
Process32FirstW
OpenMutexA
SetConsoleOutputCP
AddAtomA
FindAtomA
GetSystemInfo
EnumResourceTypesW
CreateIoCompletionPort
FreeEnvironmentStringsW
EnumResourceNamesA
FindNextFileW
GetConsoleTitleW
RequestWakeupLatency
GetConsoleCursorInfo
ScrollConsoleScreenBufferA
SetCalendarInfoA
GetWindowsDirectoryW
GetProfileSectionW
AreFileApisANSI
DeleteFileA
FlushFileBuffers
GetLastError
MoveFileA
GetStartupInfoA
HeapValidate
IsBadReadPtr
RaiseException
LeaveCriticalSection
EnterCriticalSection
SetStdHandle
GetFileType
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
DeleteCriticalSection
GetModuleFileNameW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
InterlockedDecrement
ExitProcess
GetModuleFileNameA
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapSize
HeapReAlloc
VirtualAlloc
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
SetFilePointer
RtlUnwind
DebugBreak
OutputDebugStringA
OutputDebugStringW
LoadLibraryW
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CreateFileA
CloseHandle
GetModuleHandleA
user32
GetMenuCheckMarkDimensions
GetMenuInfo
GetMenuBarInfo
Sections
.text Size: 202KB - Virtual size: 202KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 4.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10.2MB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ