c:\mix\Few\rest\Son\character\HumanSpeech.pdb
Static task
static1
Behavioral task
behavioral1
Sample
31701e9ca2b8d3290281eaa8f6b79cfd_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
31701e9ca2b8d3290281eaa8f6b79cfd_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
31701e9ca2b8d3290281eaa8f6b79cfd_JaffaCakes118
-
Size
500KB
-
MD5
31701e9ca2b8d3290281eaa8f6b79cfd
-
SHA1
5c3609023dfac427625eb735b1f9da808e9a003d
-
SHA256
e2fc093307e359553d9f32f59d1505c511529f64bcb07ce21b730921031f324a
-
SHA512
61e627b479e6cc3bd7f20e5c5b9af9f81f12531139349c3255dc7671fa2b78493c6e0fc9e3edf12febbe9f66b6175c392222d1f75ffe74d40f1bee84ec297bc6
-
SSDEEP
6144:6pzIg1y/OWjwOrhYaw6M//I2OIuFyPfRCEE0WeTygiHKDZSt1yvEV7XH:6pcg1QSCh6DnvOIuFyhhi7KEV7XH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31701e9ca2b8d3290281eaa8f6b79cfd_JaffaCakes118
Files
-
31701e9ca2b8d3290281eaa8f6b79cfd_JaffaCakes118.exe windows:5 windows x86 arch:x86
8cceaac3aec9f11cfec5a4d8c7d67369
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetProcAddress
LoadLibraryW
Sleep
WriteConsoleW
HeapReAlloc
SetFilePointer
ReadFile
FlushFileBuffers
GetConsoleMode
TlsAlloc
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
IsValidCodePage
GetOEMCP
GetACP
HeapSize
GetLocaleInfoW
GetStringTypeW
GetSystemTimeAsFileTime
RemoveDirectoryW
DeleteCriticalSection
CreateFileW
SetEndOfFile
GetFileSize
WriteFile
CloseHandle
GetDiskFreeSpaceW
GetTimeFormatW
GetFileTime
GetCurrentProcessId
GetLocalTime
CreateMutexW
OpenMutexW
DeleteFileW
FindFirstChangeNotificationW
ResetEvent
GetEnvironmentVariableW
PeekNamedPipe
DuplicateHandle
GetConsoleCP
GetCurrentThread
GetTickCount
SetStdHandle
QueryPerformanceCounter
GetFileType
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
GetLastError
HeapFree
RaiseException
RtlUnwind
GetCommandLineW
HeapSetInformation
GetStartupInfoW
GetCPInfo
HeapAlloc
LCMapStringW
HeapCreate
IsProcessorFeaturePresent
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
user32
SendDlgItemMessageW
GetScrollRange
InsertMenuItemW
IsDialogMessageW
LoadBitmapW
SendMessageTimeoutW
SetWindowTextW
GetIconInfo
SetClipboardData
SendMessageW
IsClipboardFormatAvailable
GetDlgItemInt
CheckRadioButton
SetForegroundWindow
CheckMenuRadioItem
LoadImageW
DispatchMessageW
IsWindowEnabled
GetClassNameW
SetDlgItemInt
gdi32
TextOutW
SetViewportOrgEx
Rectangle
RestoreDC
CreateFontIndirectW
StartDocW
StartPage
RectVisible
comctl32
ImageList_SetOverlayImage
ImageList_Draw
CreateStatusWindowW
CreateToolbarEx
ord17
PropertySheetW
DestroyPropertySheetPage
comdlg32
GetFileTitleW
GetSaveFileNameW
ChooseColorW
GetOpenFileNameW
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Sections
.text Size: 245KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 210KB - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ