he#@1.Pdb
Static task
static1
Behavioral task
behavioral1
Sample
a37b2233aab704e32828d9d7554a2130_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
a37b2233aab704e32828d9d7554a2130_JaffaCakes118
-
Size
284KB
-
MD5
a37b2233aab704e32828d9d7554a2130
-
SHA1
f7c29349fb5924614a09e6b97580d89a75756eda
-
SHA256
d83fb3097072588d0941b94d0272a27088b226cf6f46570311824a2aaade220e
-
SHA512
ff4baf31d713ba4d9305520e00f4dc9915032c313f2bb5ed1bfd53a2049b5d0edb1f7e908bff410da1ee5a9f7c1073c0098951ae32767eb1dc1940767a3cdbe8
-
SSDEEP
3072:Qe+54TPVY81YHKeVwQNMLZHIVlaV5FOlvVELrqae4++I33In:26dYUeVwQNT33lvVEnqpD+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a37b2233aab704e32828d9d7554a2130_JaffaCakes118
Files
-
a37b2233aab704e32828d9d7554a2130_JaffaCakes118.exe windows:5 windows x86 arch:x86
1352ce34abc08065cdfe7bddd98ba777
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
setupapi
SetupDiDestroyDriverInfoList
gdi32
LineDDA
GetRandomRgn
GdiSetBatchLimit
MoveToEx
LineTo
kernel32
WinExec
lstrlenW
GetStringTypeExA
GetBinaryTypeW
FillConsoleOutputAttribute
GlobalMemoryStatus
GetDriveTypeW
GetCommMask
GetVolumePathNamesForVolumeNameW
CreateMailslotA
GetModuleHandleW
GetTimeZoneInformation
Wow64EnableWow64FsRedirection
GetProcessHeap
GetCommandLineA
GetNamedPipeClientProcessId
GetStringScripts
advapi32
RegSetKeySecurity
secur32
QuerySecurityPackageInfoW
GetComputerObjectNameW
shlwapi
StrChrNW
PathIsUNCServerW
StrChrA
ole32
CoInvalidateRemoteMachineBindings
user32
InsertMenuA
EnumDisplayMonitors
GetPriorityClipboardFormat
GetUpdateRect
Sections
.text Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 204KB - Virtual size: 203KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ