wehjWEJHwle#L;.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1538156d51f27c2560dc6afc35943493_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
1538156d51f27c2560dc6afc35943493_JaffaCakes118
-
Size
500KB
-
MD5
1538156d51f27c2560dc6afc35943493
-
SHA1
8a1b5c17d490c86fb381540af200677137873558
-
SHA256
5a344865de5fffad1e8c19554146891220a3311580dac74fe6d97b27ef31af0d
-
SHA512
af74c834e41be87333ae5dde5900a7e7d6b00c96d7342ffe9f55993fb0399e941c38d04f9d461a739f110ef93b0a3a9b879d4351b5402b64d14503e8a54dc517
-
SSDEEP
6144:c2ry1mveAWtOphawjqFCLzDepjv+LJCVXVm3tqD2:fry1TAWtOpQwjqFKepj+JCVX8V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1538156d51f27c2560dc6afc35943493_JaffaCakes118
Files
-
1538156d51f27c2560dc6afc35943493_JaffaCakes118.exe windows:5 windows x86 arch:x86
dcb5af9f485deb10dd82e711cb769c1a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
StrChrNW
AssocQueryStringW
StrChrA
gdi32
EndPage
EnumFontsA
FrameRgn
secur32
MakeSignature
kernel32
TzSpecificLocalTimeToSystemTime
GetDefaultCommConfigA
RemoveVectoredExceptionHandler
GetModuleHandleA
VerifyScripts
crypt32
CryptInstallDefaultContext
urlmon
CoInternetIsFeatureEnabledForUrl
advapi32
RegSetKeySecurity
RevertToSelf
ntdsapi
DsBindWithCredA
msvfw32
ICCompressorFree
user32
SetUserObjectInformationW
ModifyMenuA
TrackPopupMenuEx
GetParent
IsCharLowerW
rasapi32
RasDeleteEntryW
setupapi
SetupDiBuildClassInfoListExW
SetupGetLineTextA
ws2_32
listen
oleaut32
SafeArrayLock
ole32
CoGetObject
Sections
.text Size: 146KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 243KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Z Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6FXU Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ