c:\Users\Mr.Anderson\Desktop\2003\Emot\Compressor_demo\Compressor\Release\Compressor.pdb
Static task
static1
Behavioral task
behavioral1
Sample
360168bae948242f58b16f0f7e16d9a4_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
360168bae948242f58b16f0f7e16d9a4_JaffaCakes118
-
Size
268KB
-
MD5
360168bae948242f58b16f0f7e16d9a4
-
SHA1
e67ed37732ad31f1b399127408a666faabf0ee51
-
SHA256
cfa94c1253595b7e289821eddcfe0f9a73b1c65401915dd25faa5134530e7395
-
SHA512
66b262c7393f2b1e9bc821754d1897685502e546176e9b8df023726a2af7cf4a91b26ecc13e273a4028966d47b65e6c993cdc95ae5d62d813df0dbadca49ec03
-
SSDEEP
6144:bRLpX0Ez+y2ccld5b2IOIQlNtGZknC/NAbnZfp/k:bRLpk6oybZx/k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 360168bae948242f58b16f0f7e16d9a4_JaffaCakes118
Files
-
360168bae948242f58b16f0f7e16d9a4_JaffaCakes118.exe windows:4 windows x86 arch:x86
02f250088e462a2ba0ee06563f329b42
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
winmm
waveOutGetVolume
waveInReset
waveInUnprepareHeader
waveInClose
waveInOpen
waveInPrepareHeader
waveInAddBuffer
waveInStart
waveOutSetVolume
mixerOpen
mixerGetLineInfoA
mixerClose
mixerGetLineControlsA
mixerGetControlDetailsA
mixerSetControlDetails
mciGetErrorStringA
comctl32
ord17
kernel32
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetStdHandle
LoadLibraryA
IsBadCodePtr
IsBadReadPtr
InitializeCriticalSection
GetSystemTimeAsFileTime
SetConsoleCtrlHandler
OutputDebugStringA
VirtualAlloc
GetTimeZoneInformation
GetModuleHandleA
ExitProcess
InterlockedExchange
GetOEMCP
GetACP
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetCPInfo
FlushFileBuffers
GetLocaleInfoW
CloseHandle
CompareStringA
CompareStringW
VirtualFree
TlsAlloc
HeapAlloc
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersionExA
RaiseException
HeapFree
GetProcAddress
VirtualProtect
GetSystemInfo
VirtualQuery
MultiByteToWideChar
LCMapStringA
WideCharToMultiByte
GetLastError
LCMapStringW
SetEnvironmentVariableA
SetLastError
GetCurrentThreadId
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
HeapDestroy
HeapCreate
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapSize
SetUnhandledExceptionFilter
SetFilePointer
GetLocaleInfoA
user32
LoadIconA
DialogBoxParamA
SendMessageA
EndDialog
GetDlgItem
GetClientRect
GetDC
ReleaseDC
GetDlgCtrlID
ShowWindow
MessageBoxA
gdi32
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
CreateSolidBrush
DeleteObject
SelectObject
Sections
.text Size: 100KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ