H:\net\Frozen\comprises\GetPositio.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6a9c3acdceea660822c7867acf0e2814_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6a9c3acdceea660822c7867acf0e2814_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
6a9c3acdceea660822c7867acf0e2814_JaffaCakes118
-
Size
467KB
-
MD5
6a9c3acdceea660822c7867acf0e2814
-
SHA1
ce2f262610f48d13536510d414a47fac6f7cfdeb
-
SHA256
afbe272e2521aec737bdc2552c786faaa4557400907343871dd1e539acb8feb7
-
SHA512
c14b2f0869bab8309dd1e4fb60eb118ddf523be6b7a48e747dec6381d0b6e75dc5363448f7850ef8d820186f43c08ad5a40f8b99859762a46e773307b834a38d
-
SSDEEP
6144:m4n0eLpsRit9aKQT7AK6Kt5vpAyOau+mMcTojqqmhC9xdNiBacEy8AAMFUgh:m4ltsRoaKu7AKgOd/ccjqqmhC9rN+D8E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 6a9c3acdceea660822c7867acf0e2814_JaffaCakes118
Files
-
6a9c3acdceea660822c7867acf0e2814_JaffaCakes118.exe windows:5 windows x86 arch:x86
6d3e47af2b100210d051b0e2ab40642b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB Paths
Imports
kernel32
SetConsoleCursorPosition
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
GetConsoleScreenBufferInfo
GetStdHandle
HeapAlloc
HeapCreate
GetLastError
RaiseException
ReadFile
GetProcessHeap
SetEndOfFile
SetFilePointer
SetStdHandle
GetConsoleMode
GetConsoleCP
SetConsoleWindowInfo
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapFree
HeapQueryInformation
HeapSize
HeapReAlloc
LoadLibraryW
OutputDebugStringW
WriteConsoleW
OutputDebugStringA
SetConsoleScreenBufferSize
GetConsoleWindow
GetCurrentProcessId
GetProcAddress
FreeLibrary
EnumDateFormatsA
WaitForSingleObject
GetModuleHandleA
FlushFileBuffers
LoadLibraryA
CreateFileA
CloseHandle
IsValidCodePage
GetCPInfo
GetOEMCP
GetACP
WriteFile
SetLastError
TlsFree
TlsSetValue
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DecodePointer
EncodePointer
GetModuleFileNameW
RtlUnwind
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapValidate
IsBadReadPtr
TlsAlloc
TlsGetValue
CreateFileW
user32
FindWindowA
GetWindowThreadProcessId
GetDlgItem
GetDesktopWindow
GetWindowDC
IsWindowEnabled
GetFocus
GetWindowRect
ShowWindow
GetDC
SendMessageA
GetIconInfo
DrawIcon
ReleaseDC
GetClientRect
MoveWindow
SendDlgItemMessageA
EndDialog
DefWindowProcA
SetWindowLongA
GetWindowLongA
SetWindowRgn
SetWindowPos
EnableMenuItem
PostMessageA
LoadStringA
gdi32
CreateDIBSection
SelectObject
DeleteObject
DeleteDC
CreateSolidBrush
CreatePen
Rectangle
CreateRectRgnIndirect
CreateCompatibleDC
shell32
ord727
SHGetFileInfoW
SHGetSpecialFolderPathA
ole32
CoInitialize
CoCreateInstance
winscard
SCardIntroduceReaderA
opengl32
glClear
glColor3f
glRectf
Sections
.text Size: 374KB - Virtual size: 374KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ydata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.script Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ