berJRWehwbenETMBwvev324Y123rFGBE.Pdb
Static task
static1
Behavioral task
behavioral1
Sample
5b82c3d60a56364fb46eaf9f8c5fde74_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
5b82c3d60a56364fb46eaf9f8c5fde74_JaffaCakes118
-
Size
144KB
-
MD5
5b82c3d60a56364fb46eaf9f8c5fde74
-
SHA1
dd5472f5e822d64a75d1785db0e410e225860059
-
SHA256
9f3a7efeb46f72dbdacb07e409a23cc78055eb7d5c0dacee9d303d1c49bc2540
-
SHA512
a783a88c799591cb98361bcc31c77b1479f9572d60115b0c53413ada538c2a58968179d0bb39f125398c3ef584d021111495273b2939060186725b672fb36a74
-
SSDEEP
3072:D1M+uKOgmkhz0GRSwnCu9yY4leAonHykKQi4YV4+k9M:++xQy/nCYwaSKi4y4D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 5b82c3d60a56364fb46eaf9f8c5fde74_JaffaCakes118
Files
-
5b82c3d60a56364fb46eaf9f8c5fde74_JaffaCakes118.exe windows:5 windows x86 arch:x86
b7fb2299cc19fdafe1b5b352d8b1ed0e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
wininet
InternetSetOptionA
InternetSetStatusCallbackW
crypt32
CertCreateCTLContext
winspool.drv
ReadPrinter
AddFormW
gdi32
MaskBlt
SetMiterLimit
EnumFontFamiliesExA
GetDCOrgEx
oleaut32
SafeArrayRedim
kernel32
GetFileSize
WaitForMultipleObjects
FindFirstFileExA
SystemTimeToFileTime
GetDateFormatW
IsBadHugeReadPtr
SetMailslotInfo
GetStdHandle
CloseHandle
lstrcmpiA
GetDefaultCommConfigW
GetModuleHandleA
lstrcatA
GetBinaryTypeW
IsThreadAFiber
msi
ord30
ord29
mprapi
MprConfigInterfaceCreate
opengl32
glMultMatrixf
setupapi
SetupDiDeleteDeviceInfo
SetupDiGetDeviceInterfaceAlias
SetupDiGetDeviceRegistryPropertyA
SetupQueryInfOriginalFileInformationW
advapi32
AccessCheckAndAuditAlarmW
CryptImportKey
netapi32
NetLocalGroupDelMembers
shlwapi
SHRegSetUSValueW
StrCatBuffW
wintrust
CryptCATStoreFromHandle
FindCertsByIssuer
WTHelperCertIsSelfSigned
msvcrt
wcstod
fgetc
rpcrt4
RpcBindingSetAuthInfoExA
RpcMgmtInqComTimeout
iphlpapi
GetInterfaceInfo
GetNetworkParams
user32
DefFrameProcW
GetCursorPos
RealGetWindowClassA
LoadCursorW
GetUpdateRgn
FlashWindow
GetLastInputInfo
IsCharLowerW
SetMenu
CreateDesktopW
Sections
.text Size: 116KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ