hegwwerherher@@!.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4215b382e492b2d60589a902e98de482_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
4215b382e492b2d60589a902e98de482_JaffaCakes118
-
Size
173KB
-
MD5
4215b382e492b2d60589a902e98de482
-
SHA1
f9e0505334722d57124be8ba8e76489726fda1c7
-
SHA256
4e078d71ceb167cf4445e1f49ec72d82f60ad5e1f1c8883bdaa33edf37537cc0
-
SHA512
e2ce8d1c796cfec8d4cba6b5b20e71d39dcfb0fc718e62cb7fa4459e61288070eafbc9a7e13062a0abd3a0d0f5ca7dc9323ce64ced3ed01c2bfdb5bc6456658b
-
SSDEEP
1536:wFe+HuFn3GIDmn+5yTKojNn2z3io5d96seoqdrZFKrsp+gyOaGkNWqd9Z8LT0u6Z:PJ3X/DojNY3io5DpeNFQygxL8IuhrZ6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4215b382e492b2d60589a902e98de482_JaffaCakes118
Files
-
4215b382e492b2d60589a902e98de482_JaffaCakes118.exe windows:5 windows x86 arch:x86
bb6e06475ffcca38407f416a6249c774
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
EnumTimeFormatsA
GetProfileIntW
LockResource
GetQueuedCompletionStatus
LocalReAlloc
EnumSystemLocalesW
GetProfileSectionA
GlobalMemoryStatus
GetThreadId
lstrlenA
GetCurrencyFormatA
GetFileAttributesW
Module32Next
GetDiskFreeSpaceW
lstrcmpW
GetThreadSelectorEntry
FindActCtxSectionGuid
oleaut32
VarCyCmp
secur32
DeleteSecurityContext
version
GetFileVersionInfoSizeA
gdi32
ExtEscape
GetMapMode
msi
ord29
ord30
rasapi32
RasRenameEntryA
user32
GetWindowWord
GetFocus
GetWindowPlacement
GetMenuBarInfo
LoadIconA
GetWindowTextLengthW
DestroyAcceleratorTable
GetClipboardOwner
DrawIcon
GetDesktopWindow
GetKeyboardLayoutNameA
LockSetForegroundWindow
ShowCursor
DdeDisconnectList
winspool.drv
GetPrinterW
msvcrt
ungetwc
advapi32
DeleteService
GetWindowsAccountDomainSid
LogonUserW
ws2_32
socket
Sections
.text Size: 134KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.crt1 Size: 20KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ