PDA.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0020351cc4c2a3ea6e0b1fc5fa684fe3_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
0020351cc4c2a3ea6e0b1fc5fa684fe3_JaffaCakes118
-
Size
132KB
-
MD5
0020351cc4c2a3ea6e0b1fc5fa684fe3
-
SHA1
626f9da100fe83bbee5a25d52b87a3d4b48be5c9
-
SHA256
a67915345f7a32e7c40c51469a983ae18b731a658c04e370f2674ce8246c32dd
-
SHA512
e109d10bb84c33c246b1ba55c29949d2027389a5ad8d6c22770fefbbe162024dcedd573b69537109743b6dde0d85b6cebfd5e4460eef58d22c852a0325fcbdad
-
SSDEEP
3072:qTu19iMnR4ueRRKAQWXpr5r3/47hpK1W:qy1RrGFQ6r5c7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0020351cc4c2a3ea6e0b1fc5fa684fe3_JaffaCakes118
Files
-
0020351cc4c2a3ea6e0b1fc5fa684fe3_JaffaCakes118.exe windows:6 windows x86 arch:x86
83d49d36f67ea22c6ba3dc95a014ee94
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
GetFontLanguageInfo
CreateBrushIndirect
SetBitmapDimensionEx
ScaleViewportExtEx
advapi32
QueryUsersOnEncryptedFile
ChangeServiceConfig2W
OpenBackupEventLogA
shell32
DuplicateIcon
SHSetLocalizedName
setupapi
SetupCopyOEMInfA
shlwapi
ord437
crypt32
CryptMsgClose
rasapi32
RasGetEapUserIdentityA
winscard
SCardStatusA
SCardBeginTransaction
mprapi
MprAdminConnectionEnum
kernel32
FlsGetValue
SetEvent
LocalLock
OpenFile
SleepEx
GetCommModemStatus
GetCurrentThreadId
GetTimeZoneInformation
GetProcessIdOfThread
GetSystemTimes
GetCommandLineW
SetHandleInformation
WritePrivateProfileStringA
CreateDirectoryA
DeleteTimerQueueTimer
FileTimeToDosDateTime
oleaut32
VarI4FromCy
VarI4FromStr
user32
LookupIconIdFromDirectory
GetScrollRange
CloseWindow
BroadcastSystemMessageW
SendDlgItemMessageA
DestroyAcceleratorTable
GetCursorPos
GetMessagePos
Sections
DATA Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 100KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 316B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ