l5gXiD5DD2Qlu5.pdb
Static task
static1
Behavioral task
behavioral1
Sample
7c7958b8faddbacdce4f897530a47440_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
7c7958b8faddbacdce4f897530a47440_JaffaCakes118
-
Size
208KB
-
MD5
7c7958b8faddbacdce4f897530a47440
-
SHA1
b79d457662c5e3c864e9a95b9f8f7f540fddc13c
-
SHA256
8e6ca08bb52bc257f646cee309edea4c870fb0080cb130327da16534bcf21cf4
-
SHA512
ae95d753be3371e4e88af09331f8b46e6d83971decf0bbbcc24c0a45c9baa3e29d29ac2cdf04c835bd46dd1acd3738ffb2d1806184e1dd39508825054d58898d
-
SSDEEP
3072:+9KD7YKolPByVNCyxsO99LVo1XlGEiNXPgoGYBiJu52Oop+/zEmwS:+9+YKgPByVNC4bVoCEKPg7shPj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c7958b8faddbacdce4f897530a47440_JaffaCakes118
Files
-
7c7958b8faddbacdce4f897530a47440_JaffaCakes118.exe windows:6 windows x86 arch:x86
e981e88d1d20dc47e113db50adb40cb0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
GetClipBox
shell32
ExtractIconA
mscms
GetColorDirectoryW
kernel32
CloseHandle
GetLargePageMinimum
GetTimeZoneInformation
GetSystemPowerStatus
GetStringTypeA
ClearCommBreak
UnregisterApplicationRecoveryCallback
WaitForSingleObject
Thread32First
HeapCompact
UnregisterApplicationRestart
GetCommandLineW
GetCurrentProcessId
GetVersion
advapi32
IsTokenRestricted
user32
GetTopWindow
EnableScrollBar
DrawTextA
SetMenuContextHelpId
GetKeyboardType
GetFocus
version
GetFileVersionInfoSizeA
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 104KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.v0 Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ