JerJREHWEW#2HnrehRW.pdb
Static task
static1
Behavioral task
behavioral1
Sample
89eec8e5dd09b35da3e352163a614eee_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
89eec8e5dd09b35da3e352163a614eee_JaffaCakes118
-
Size
281KB
-
MD5
89eec8e5dd09b35da3e352163a614eee
-
SHA1
995e92bd5ede8f2ce893724c199efa1d62fb7995
-
SHA256
f3cf3d5935d88ab2a437ea66b2ea395fc7bd4873c4123dcbdbcb36da948ec1d0
-
SHA512
8244a269417cbdbcb842c42313007918f48542dd04eea4420644af0fc8169ea6bfd2257aecae605ff2ef2bdf58a3140a78ea512121c128487f00414039c23211
-
SSDEEP
1536:eK0YxtNPTZEgfiBwbs6W4OPgVgYKUROun7POwWy8SAIpIK4wF2TiyE0+PmK:eDYFPTZEgfywSIVeU0AGS8Uz4wF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89eec8e5dd09b35da3e352163a614eee_JaffaCakes118
Files
-
89eec8e5dd09b35da3e352163a614eee_JaffaCakes118.exe windows:5 windows x86 arch:x86
24bae58aa801c37f8fb8cfd6b8e587f3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
fgetwc
crypt32
CryptSIPLoad
CryptMemRealloc
CertGetSubjectCertificateFromStore
CertNameToStrA
user32
CharLowerBuffW
TrackPopupMenu
DialogBoxParamW
DrawCaption
MessageBeep
wsprintfA
winscard
SCardLocateCardsW
rasapi32
RasGetConnectStatusA
RasGetProjectionInfoA
wininet
InternetInitializeAutoProxyDll
kernel32
GetTempPathW
EnterCriticalSection
EnumSystemLocalesW
GetBinaryTypeA
FlsFree
ole32
CLSIDFromString
OleCreateStaticFromData
OleCreateFromData
winspool.drv
FindNextPrinterChangeNotification
gdi32
ModifyWorldTransform
AddFontResourceA
ExtSelectClipRgn
SetDCPenColor
GetTextCharset
shlwapi
PathSetDlgItemPathW
opengl32
glMultMatrixd
glBegin
iphlpapi
GetNetworkParams
oleaut32
VarBstrFromBool
VarCyAdd
UnRegisterTypeLi
GetActiveObject
advapi32
GetFileSecurityW
AddAuditAccessAceEx
ReadEventLogA
DuplicateToken
LogonUserA
RegCloseKey
DeleteAce
ws2_32
WSACleanup
Sections
.text Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bT Size: 1024B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
D Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt0 Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cji8 Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ