CNWKJEHNEWOI!#@OpTKYH_)BPORWKBJ@*(#.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0d47c681a1881409b3db18917871dd5e_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
0d47c681a1881409b3db18917871dd5e_JaffaCakes118
-
Size
236KB
-
MD5
0d47c681a1881409b3db18917871dd5e
-
SHA1
53c7c1036ca601595f34bf9d140d5dee190fc1e9
-
SHA256
09806accc4a5c00f081d0e1dff9d66a41f8e18f12f5a159d7c68b0b1d2b9249d
-
SHA512
6663bdd60551412a53b38032af4ff17c6c0740dd5adb172080e099ca32e11864b021736c6a00b11cefac8af9d7ce2d13364368b6eabe2c8ad1db124e2f60b590
-
SSDEEP
3072:j60bAATGu22xKwv3IRWiW3kHtSoqqIdmki:GJ8jKS3Ik93kNBqq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d47c681a1881409b3db18917871dd5e_JaffaCakes118
Files
-
0d47c681a1881409b3db18917871dd5e_JaffaCakes118.exe windows:5 windows x86 arch:x86
5da3008c17fef99d4ce44a636408d7f1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
powrprof
PowerRestoreDefaultPowerSchemes
user32
DdeFreeStringHandle
GetPriorityClipboardFormat
LockWindowUpdate
LoadAcceleratorsW
GetForegroundWindow
DestroyIcon
DeferWindowPos
advapi32
RemoveUsersFromEncryptedFile
QueryUsersOnEncryptedFile
EnumServicesStatusExW
winspool.drv
FindNextPrinterChangeNotification
lz32
LZSeek
kernel32
GetFileMUIPath
UnlockFileEx
GetModuleFileNameA
GetBinaryTypeA
GetProcessHandleCount
GetModuleHandleA
VirtualQueryEx
lstrlenW
GetThreadLocale
IsValidCodePage
EnumResourceNamesW
GetCurrentThreadId
GetPrivateProfileStructW
LoadLibraryExW
WritePrivateProfileStructA
GetConsoleWindow
GetVolumeInformationW
GetProcAddress
mscms
GetColorProfileHeader
wininet
FindNextUrlCacheEntryExW
gdi32
GetMetaFileBitsEx
GetCharWidth32A
GetTextMetricsA
DeleteMetaFile
FlattenPath
GetBitmapBits
Sections
.text Size: 216KB - Virtual size: 213KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ