wehjWEJHwle#L;.pdb
Static task
static1
Behavioral task
behavioral1
Sample
7936a9b81c1166beee7b346640fdbd17_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
7936a9b81c1166beee7b346640fdbd17_JaffaCakes118
-
Size
496KB
-
MD5
7936a9b81c1166beee7b346640fdbd17
-
SHA1
748455a1c156b2603163f37b75e65df8fcb9ba53
-
SHA256
2dbff5e59d76080e380afec2a128a2134f4beda7e3871fb82f131fa8dfe23d60
-
SHA512
4a1572d3b1571cab14d6252076ef7e5d9ccddaec40ee38ff8a570f307f2a82e6b80007aa227fb7cd526e31b69038d0d860c7bc3850d3a83d2a36f431330999a9
-
SSDEEP
6144:IsJnaXMC66Cco5hG0ma/ep9z/amWaS/4x4s4/mlB/jsdQOjTR2:ISnaXMHvG1T/amFq4xMCB/gdxZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7936a9b81c1166beee7b346640fdbd17_JaffaCakes118
Files
-
7936a9b81c1166beee7b346640fdbd17_JaffaCakes118.exe windows:5 windows x86 arch:x86
34d38113540ca3c8be8051dbb5d1584f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
setupapi
SetupDiBuildClassInfoListExW
SetupGetLineTextA
ws2_32
listen
oleaut32
SafeArrayLock
crypt32
CryptInstallDefaultContext
shlwapi
StrChrNW
StrChrA
AssocQueryStringW
ntdsapi
DsBindWithCredA
msvfw32
ICCompressorFree
rasapi32
RasDeleteEntryW
kernel32
RemoveVectoredExceptionHandler
GetDefaultCommConfigA
VerifyScripts
GetModuleHandleA
TzSpecificLocalTimeToSystemTime
advapi32
RegSetKeySecurity
RevertToSelf
user32
ModifyMenuA
IsCharLowerW
SetUserObjectInformationW
TrackPopupMenuEx
GetParent
ole32
CoGetObject
gdi32
EnumFontsA
FrameRgn
EndPage
urlmon
CoInternetIsFeatureEnabledForUrl
secur32
MakeSignature
Sections
.text Size: 145KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 240KB - Virtual size: 246KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Z Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6FXU Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ