jkler.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3aebf0b34a081b95ee2e8e2da2bb406d_JaffaCakes118.exe
Resource
win7-20240419-en
General
-
Target
3aebf0b34a081b95ee2e8e2da2bb406d_JaffaCakes118
-
Size
209KB
-
MD5
3aebf0b34a081b95ee2e8e2da2bb406d
-
SHA1
df5e5da1587cd6ba1f2e9f11e48c470dd18dd9b1
-
SHA256
7ea7a35c55eee84e79457074a06f1dc5a85a4142a48351e518aa386f9fadb339
-
SHA512
7048149186d5786d688ce9f2deb6cf69752137bc699e4fa1ca140ade416c0d6709d1d8920f20af22667d745a78dd04b3470a41da289a8beb5d4b28ac146cdaa4
-
SSDEEP
3072:NlhKQ9y9mYVstYuq3VCOHGgnZC2aIKtqVwsmoEgx2AOx3:sHGmOk95EF3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3aebf0b34a081b95ee2e8e2da2bb406d_JaffaCakes118
Files
-
3aebf0b34a081b95ee2e8e2da2bb406d_JaffaCakes118.exe windows:5 windows x86 arch:x86
353b229c83ed5b3ca6aacfbd16144757
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM
PDB Paths
Imports
cfgmgr32
CMP_WaitNoPendingInstallEvents
clusapi
ClusterRegQueryValue
user32
GetKeyboardLayout
SetClipboardData
GetScrollPos
SetActiveWindow
PostQuitMessage
DestroyCursor
GetSysColorBrush
GetProcessDefaultLayout
GetComboBoxInfo
SetScrollPos
GetUpdatedClipboardFormats
oleaut32
BSTR_UserFree
kernel32
SetErrorMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GlobalAddAtomA
VirtualFree
GetStringTypeExW
GetCommTimeouts
GetPrivateProfileSectionW
GetModuleHandleW
GetConsoleCP
PurgeComm
gdi32
ExtSelectClipRgn
GetMapMode
GetCurrentPositionEx
advapi32
GetTokenInformation
GetUserNameA
QueryUsersOnEncryptedFile
lz32
LZSeek
iphlpapi
UnenableRouter
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
CODE Size: 9KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CONST Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE