C:\Users\Fly3110\source\repos\installer2_2017\Release\finder.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a13697f42a38362fc16a56ff8ec1f1bf_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a13697f42a38362fc16a56ff8ec1f1bf_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
a13697f42a38362fc16a56ff8ec1f1bf_JaffaCakes118
-
Size
937KB
-
MD5
a13697f42a38362fc16a56ff8ec1f1bf
-
SHA1
86395503760ae7fc05478b0ec5f189d450f45153
-
SHA256
9880976388e8087ddeecc8bafdb872dda5cde462d7f085a66794782ba3623b18
-
SHA512
8f80c326251e23e97499a919bf259e71318503dfc44209d3c69161381f88388abc3f801a92f0b7293001375eaeb9df65b23ae6e142ecf7ea074b95310d121d46
-
SSDEEP
24576:iWYE1HB1d2G3HgT/SiysmloMdiV/MBGGyyXrJiTmA4J:iGtwS+nMBGXy7JiTj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a13697f42a38362fc16a56ff8ec1f1bf_JaffaCakes118
Files
-
a13697f42a38362fc16a56ff8ec1f1bf_JaffaCakes118.exe windows:6 windows x86 arch:x86
37fca3ad95da01bb5fe5897969a7bd3e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
lstrcmpA
GetModuleHandleA
Sleep
CopyFileA
GetFileAttributesA
LockResource
GetWindowsDirectoryA
LoadResource
SetEvent
CloseHandle
ExitProcess
CreateEventA
GetLastError
AreFileApisANSI
ReadFile
TryEnterCriticalSection
HeapCreate
HeapFree
EnterCriticalSection
GetFullPathNameW
WriteFile
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
LeaveCriticalSection
InitializeCriticalSection
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
WaitForSingleObject
CreateFileW
GetFileAttributesW
GetCurrentThreadId
UnmapViewOfFile
HeapValidate
HeapSize
MultiByteToWideChar
FormatMessageW
GetDiskFreeSpaceA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
FindClose
LoadLibraryA
WaitForSingleObjectEx
DeleteFileW
HeapReAlloc
GetSystemInfo
LoadLibraryW
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
GetProcAddress
LocalFree
LockFileEx
GetFileSize
DeleteCriticalSection
GetCurrentProcessId
GetProcessHeap
SystemTimeToFileTime
FreeLibrary
WideCharToMultiByte
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
FindResourceA
FindNextFileA
FindFirstFileA
SizeofResource
GetModuleFileNameA
DeleteFileA
GetThreadTimes
CreateFileA
GetTempPathA
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EncodePointer
DecodePointer
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
ResetEvent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
LCMapStringA
GetUserDefaultLCID
GetStringTypeExA
RtlUnwind
RaiseException
LoadLibraryExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetStdHandle
GetACP
GetCurrentThread
GetFileType
GetConsoleCP
GetConsoleMode
IsValidLocale
EnumSystemLocalesW
SetFilePointerEx
GetTimeZoneInformation
FindFirstFileExA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
MoveFileExW
ReadConsoleW
WriteConsoleW
advapi32
RegSetValueExA
RegCloseKey
RegGetValueA
RegCreateKeyExA
RegOpenKeyExA
shell32
ShellExecuteExA
rpcrt4
UuidCreate
UuidToStringA
urlmon
URLDownloadToFileA
wininet
HttpQueryInfoA
InternetOpenA
InternetCloseHandle
HttpSendRequestA
InternetConnectA
InternetReadFile
InternetSetOptionA
HttpOpenRequestA
crypt32
CryptUnprotectData
user32
LoadStringA
Sections
.text Size: 733KB - Virtual size: 733KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 155KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ