Y:\PROGS\output.pdb
Static task
static1
Behavioral task
behavioral1
Sample
277edd273030142f97ea35dc7869140f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
277edd273030142f97ea35dc7869140f_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
277edd273030142f97ea35dc7869140f_JaffaCakes118
-
Size
616KB
-
MD5
277edd273030142f97ea35dc7869140f
-
SHA1
0d343cfe693bebe163b0ab22f863055cbd77de98
-
SHA256
35cb5c942f80dc0a96e52a7522acf1c89c351e6e22e8d7100751acd3f1247b22
-
SHA512
f355de7977201bbefc9f44dfefa4d2537495123bc0ca2303004e1fa6b6ba230f95c1331ddaa050979422b7e51b783df642a3f943dfb9ed4a80d0f92a2b7702a7
-
SSDEEP
6144:rpZXpLvydaopWd/G3pWxBNWo1PhPi0MNJWMPeF54aMaHj3zg0f3D6BWQQ9WUpzH:lZzoAmpWxHWo1PhPiqMWMazD3nf2P2WM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 277edd273030142f97ea35dc7869140f_JaffaCakes118
Files
-
277edd273030142f97ea35dc7869140f_JaffaCakes118.exe windows:4 windows x86 arch:x86
6a63828b83c61ea2eb5d719fb9ae1126
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetTickCount
ExitProcess
GetLastError
GetSystemTime
GetProcAddress
GetModuleHandleA
GetModuleHandleW
LocalAlloc
RtlUnwind
RaiseException
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetStartupInfoA
GetCommandLineA
GetVersionExA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetCPInfo
HeapFree
TerminateProcess
GetCurrentProcess
GetFileAttributesW
HeapAlloc
DebugBreak
LoadLibraryA
WriteFile
GetStdHandle
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleFileNameA
SetFilePointer
FlushFileBuffers
CloseHandle
SetUnhandledExceptionFilter
HeapReAlloc
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStringTypeA
GetStringTypeW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
VirtualProtect
GetSystemInfo
VirtualQuery
SetConsoleCtrlHandler
GetProcessHeap
FreeLibrary
IsBadCodePtr
ReadFile
SetStdHandle
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
InterlockedExchange
CreateFileA
GetTimeFormatA
GetDateFormatA
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetEnvironmentVariableW
SetEndOfFile
GetTimeZoneInformation
Sections
.textbss Size: - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 252KB - Virtual size: 250KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 264KB - Virtual size: 319KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ