j-FA_r-CMDEMWPK0oo+MtNPiV3.pdb
Static task
static1
Behavioral task
behavioral1
Sample
831bbafd3a5596994e3e5407e86a6ab0_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
831bbafd3a5596994e3e5407e86a6ab0_JaffaCakes118
-
Size
136KB
-
MD5
831bbafd3a5596994e3e5407e86a6ab0
-
SHA1
55253455615a66ad97d110d0b8dccbf2f431beb9
-
SHA256
35844cfcb17bb4fa64baaa15a0f2cef6578c5cce301494f97f92310894dee0cd
-
SHA512
e1c4de821ca8bdbbd6feb6508d4cb573aefe198612ffe664dd62266758c6fc6af86c64244ceb37f128e8137a9ad772078049f4376e1ec996502d0318ffe39a40
-
SSDEEP
3072:kPSMreQTUhxlHuqN9b+DaBNcsOlO3xI+yrfJXHpAWCnt:kPSr5hfOsp+cCCxI+yrftH6n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 831bbafd3a5596994e3e5407e86a6ab0_JaffaCakes118
Files
-
831bbafd3a5596994e3e5407e86a6ab0_JaffaCakes118.exe windows:6 windows x86 arch:x86
aa0075211c1513d2c1b9103017a8c8f9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
setupapi
CM_Get_Device_Interface_List_SizeW
advapi32
IsTokenRestricted
ClearEventLogA
CreatePrivateObjectSecurity
ole32
OleCreateDefaultHandler
gdi32
GetStockObject
GetBkColor
SaveDC
SetTextCharacterExtra
ExtTextOutA
Polyline
CreateDIBSection
Ellipse
rpcrt4
NdrConformantArrayMarshall
shlwapi
ChrCmpIW
oleaut32
VarCyFromR8
VarCyCmp
kernel32
OpenMutexW
CloseHandle
GetVersion
GetProcessPriorityBoost
GetCurrentThreadId
GetLargePageMinimum
GetQueuedCompletionStatus
LockFileEx
SetEvent
ContinueDebugEvent
GetCommandLineW
GetSystemWow64DirectoryW
GetStringTypeExW
user32
WindowFromPoint
MessageBeep
PostMessageA
SetMenu
GetInputState
mprapi
MprAdminBufferFree
imm32
ImmReleaseContext
secur32
DeleteSecurityContext
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 104KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mkV Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 528B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ