C:\Users\jinwoo\source\repos\SHA1\Debug\SHA1.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8e59996730ee18a9fe2dab9c9263107b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8e59996730ee18a9fe2dab9c9263107b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
8e59996730ee18a9fe2dab9c9263107b_JaffaCakes118
-
Size
113KB
-
MD5
8e59996730ee18a9fe2dab9c9263107b
-
SHA1
1cb8f954f1e12431319665c21e9515b06d3e993f
-
SHA256
49630626296468fcb717f52ba01813ad74f42f10a5eb3e8e29964ce27c492fc1
-
SHA512
21a9dfbac92435afe071e9cbf2a7e3af85ef87ed806de60be42f286cb15ba57c05eaf2c4701ba8e55ae1bef3ab55a43e9388ddfac1881a4c77dea9bc30aa5d00
-
SSDEEP
1536:SALoeRpf77jo7j47jI7jY7jo7j47jI7jY7jo7j47jI7jY7jo7j47j+7jup7jI7js:SRk9bZqZZnP+Yp7HVL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e59996730ee18a9fe2dab9c9263107b_JaffaCakes118
Files
-
8e59996730ee18a9fe2dab9c9263107b_JaffaCakes118.exe windows:6 windows x86 arch:x86
f1867b8a58f7cca24e01f608b059d400
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
vcruntime140d
__vcrt_GetModuleFileNameW
_except_handler4_common
__std_type_info_destroy_list
memcmp
memset
__vcrt_GetModuleHandleW
__vcrt_LoadLibraryExW
memcpy
ucrtbased
_initialize_narrow_environment
_get_initial_narrow_environment
_initterm
_initterm_e
exit
_exit
_set_fmode
__p___argc
__p___argv
_cexit
__setusermatherr
_register_thread_local_exe_atexit_callback
_configthreadlocale
_set_new_mode
__p__commode
strcat_s
__stdio_common_vsprintf_s
_seh_filter_dll
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_controlfp_s
terminate
_wmakepath_s
_wsplitpath_s
wcscpy_s
_configure_narrow_argv
_set_app_type
_seh_filter_exe
_CrtDbgReportW
_CrtDbgReport
strcpy_s
strtol
_CrtDumpMemoryLeaks
_CrtSetBreakAlloc
strcmp
strncpy
strcpy
strlen
strncmp
__stdio_common_vsprintf
__stdio_common_vfprintf
__acrt_iob_func
rand
srand
_msize
malloc
free
_time64
_c_exit
__stdio_common_vfscanf
kernel32
GetModuleHandleW
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
RaiseException
MultiByteToWideChar
GetProcAddress
FreeLibrary
VirtualQuery
GetProcessHeap
HeapFree
HeapAlloc
GetLastError
UnhandledExceptionFilter
GetStartupInfoW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
WideCharToMultiByte
Sections
.textbss Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: 512B - Virtual size: 260B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ