c:\Large\nine\break\three\Feed\callParty.pdb
Static task
static1
Behavioral task
behavioral1
Sample
90859d71e4b7902acbae03eed05c1eab_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
90859d71e4b7902acbae03eed05c1eab_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
90859d71e4b7902acbae03eed05c1eab_JaffaCakes118
-
Size
645KB
-
MD5
90859d71e4b7902acbae03eed05c1eab
-
SHA1
c1b4e1a186e140dcaef268dc9dc8512b033326c9
-
SHA256
bd067b235878c5486890effd5884bd7bdcad707edb739808b3edea035bb46b82
-
SHA512
d37ca711a8a5bc6ade748facc9079dd6ca135c67e1c4d4b942819bffd85a721cb2197aba05b0a42758d9fcc210eb721317e895ce5a773c8876aa093c95867898
-
SSDEEP
12288:Y1UHYSrQQ/eTuy6bjjl2xSwiue0CCkiHX:Y18rQQEuy6bjjl2xS4e0bke
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 90859d71e4b7902acbae03eed05c1eab_JaffaCakes118
Files
-
90859d71e4b7902acbae03eed05c1eab_JaffaCakes118.exe windows:5 windows x86 arch:x86
654d87669b9676d881a08f1cf811e8dd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
InitializeCriticalSectionAndSpinCount
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
IsValidCodePage
GetOEMCP
GetACP
GetLocaleInfoW
HeapSize
CloseHandle
SetFilePointer
ReadFile
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
VirtualAlloc
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetSystemTime
GetVersion
FileTimeToLocalFileTime
GetModuleHandleA
GetVersionExA
DeviceIoControl
LoadLibraryA
SetFileAttributesA
GetProcAddress
GetEnvironmentVariableA
WritePrivateProfileSectionW
CreateProcessA
CreateEventA
Sleep
GetVolumeInformationA
OpenProcess
GetDateFormatA
QueryPerformanceCounter
GetCurrentProcess
CreateFileA
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
GetCPInfo
RaiseException
GetLastError
HeapFree
RtlUnwind
LCMapStringA
LCMapStringW
HeapAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
GetTickCount
GetCurrentProcessId
user32
SetCapture
CallWindowProcA
SystemParametersInfoA
AppendMenuA
FrameRect
GetCursorPos
ClientToScreen
GetMessageA
CloseClipboard
MapDialogRect
EndDialog
GetKeyNameTextA
GetClassInfoExA
RegisterClassExA
GetFocus
LoadIconA
SetFocus
GetWindowTextLengthA
OffsetRect
GetWindowLongA
ole32
CoUninitialize
CoRegisterSurrogate
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
CoRegisterClassObject
gdi32
GetTextExtentPoint32A
DeleteDC
StretchBlt
CreateDCA
SetPixel
DeleteObject
SelectObject
DPtoLP
SetMapMode
CreatePen
GetObjectA
PatBlt
comctl32
CreateToolbarEx
ord6
DestroyPropertySheetPage
ImageList_SetOverlayImage
ImageList_Destroy
ord17
PropertySheetA
ImageList_Add
comdlg32
ChooseFontA
GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA
ReplaceTextA
CommDlgExtendedError
shlwapi
PathQuoteSpacesA
PathIsNetworkPathA
PathIsFileSpecA
PathCombineA
Sections
.text Size: 141KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 449KB - Virtual size: 449KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ