C:\Users\fly3110\source\repos\installer2_2017\Release\finder.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a784a7e67a26bff5c56d5c9130ab088f_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
a784a7e67a26bff5c56d5c9130ab088f_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
a784a7e67a26bff5c56d5c9130ab088f_JaffaCakes118
-
Size
833KB
-
MD5
a784a7e67a26bff5c56d5c9130ab088f
-
SHA1
abeca7b329e3d1ebc0a5b43d75873e500e2cf0cf
-
SHA256
372cf7f58d7422bf02c6ab5c7423e009886f9660d00cd86f7c4efc146d96289a
-
SHA512
23ae28fa3be6bdfced1e5f44873366381c8104bc1df69331af403087a1d389cd67ffdc2cde5d92f310de62c6ba3d43f590513c79b9a7e2413e1dbefc8dd59a4c
-
SSDEEP
24576:sUJSKzc+V9Q6Hzadh3ev+tHurfcD0MRHO2bpTbFuy:5V9+emtHxXRu29TRH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a784a7e67a26bff5c56d5c9130ab088f_JaffaCakes118
Files
-
a784a7e67a26bff5c56d5c9130ab088f_JaffaCakes118.exe windows:6 windows x86 arch:x86
f2c746df229bdc73c4478e57e3474eb9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
Sleep
SetEvent
CloseHandle
ExitProcess
CreateEventA
GetLastError
AreFileApisANSI
ReadFile
TryEnterCriticalSection
HeapCreate
HeapFree
EnterCriticalSection
GetFullPathNameW
WriteFile
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
LeaveCriticalSection
InitializeCriticalSection
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
WaitForSingleObject
CreateFileW
GetFileAttributesW
GetCurrentThreadId
UnmapViewOfFile
HeapValidate
HeapSize
MultiByteToWideChar
FormatMessageW
GetDiskFreeSpaceA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
LoadLibraryA
WaitForSingleObjectEx
GetFileAttributesA
HeapReAlloc
GetSystemInfo
LoadLibraryW
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
GetProcAddress
LocalFree
LockFileEx
GetFileSize
DeleteCriticalSection
GetCurrentProcessId
GetProcessHeap
SystemTimeToFileTime
FreeLibrary
WideCharToMultiByte
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
CopyFileA
lstrcmpA
FindClose
FindNextFileA
FindFirstFileA
GetModuleFileNameA
DeleteFileA
GetThreadTimes
DeleteFileW
GetTempPathA
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EncodePointer
DecodePointer
GetCPInfo
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
ResetEvent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
RtlUnwind
RaiseException
LoadLibraryExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
GetCurrentThread
GetFileType
GetConsoleCP
GetConsoleMode
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadConsoleW
SetFilePointerEx
GetTimeZoneInformation
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
MoveFileExW
WriteConsoleW
advapi32
RegSetValueExA
RegCloseKey
RegGetValueA
RegCreateKeyExA
RegOpenKeyExA
shell32
ShellExecuteExA
rpcrt4
UuidCreate
UuidToStringA
urlmon
URLDownloadToFileA
wininet
HttpQueryInfoA
InternetOpenA
InternetCloseHandle
HttpSendRequestA
InternetConnectA
HttpOpenRequestA
InternetSetOptionA
InternetReadFile
crypt32
CryptUnprotectData
Sections
.text Size: 645KB - Virtual size: 644KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ