raip7.pdb
Static task
static1
Behavioral task
behavioral1
Sample
89cf023ff4243760058159b1fc2bfae1_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
89cf023ff4243760058159b1fc2bfae1_JaffaCakes118
-
Size
144KB
-
MD5
89cf023ff4243760058159b1fc2bfae1
-
SHA1
b9673c2d06f6c5932ba9ad09e41a5e04f97e89d5
-
SHA256
0319cf516cbb4cad107a89e2cb4871af94644c6c7a3dc6ffbe0dc272c50ed20e
-
SHA512
862ff95ee62856548c0a627f25f685339b21ededb5dd0ac2bedf7ee581b067d08cb9d342674ee7b8e0939d9adc5f7ae22747e0ad1a2eecd24f34a74478b331df
-
SSDEEP
3072:5eycPVuTlC2nNvjAuVqfWk/AmvAzXFfZhrLqdW6:5GduTl9VE8gxdIRfZhqd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89cf023ff4243760058159b1fc2bfae1_JaffaCakes118
Files
-
89cf023ff4243760058159b1fc2bfae1_JaffaCakes118.exe windows:5 windows x86 arch:x86
18a11f4031688c78b7f62b915c2b5dbe
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
SetBkColor
GetKerningPairsA
SetTextAlign
SetViewportOrgEx
oleaut32
VARIANT_UserMarshal
SafeArrayPtrOfIndex
VarI2FromDate
ole32
RegisterDragDrop
wintrust
CryptCATAdminEnumCatalogFromHash
secur32
SetContextAttributesW
kernel32
PurgeComm
FindNextFileNameW
GetCommandLineA
GetCurrentConsoleFont
GlobalMemoryStatusEx
GlobalAlloc
GetNamedPipeClientSessionId
FindVolumeClose
GetNativeSystemInfo
GetProcessId
GetDynamicTimeZoneInformation
user32
IsWindowVisible
IsDlgButtonChecked
WindowFromDC
GetRawInputDeviceList
DrawIcon
DdeUnaccessData
GetParent
UnloadKeyboardLayout
EndMenu
shell32
SHEnumerateUnreadMailAccountsW
setupapi
SetupDiInstallClassW
advapi32
CryptSetProviderExW
GetSecurityDescriptorControl
RegOverridePredefKey
IsValidSecurityDescriptor
shlwapi
StrToIntW
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 100KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.crt Size: 4KB - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ