ynmNa1OjKdUie.pdb
Static task
static1
Behavioral task
behavioral1
Sample
aa2993dc35b9413e3209ab9fafa937b0_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
aa2993dc35b9413e3209ab9fafa937b0_JaffaCakes118
-
Size
120KB
-
MD5
aa2993dc35b9413e3209ab9fafa937b0
-
SHA1
200947cb45fbea5b1a1746c3c9fa8bdf018cd1a8
-
SHA256
449d9173a6084f37195d54c00a11d17168e2e20b508bdd36b93328a8317052aa
-
SHA512
186f305f5b07590f4961c6c6e32d25dc0c0a1dfab64fb907a87231e5284bff7c3d199733b7b28773dc78ab70b71368fc7fd08905cc4679fb3119717b5428eeaf
-
SSDEEP
3072:zroqDO0/1Ov1BazAfEhcLLMyThxH9er5jYfMQ0uVscaKKV:zroqDO0/1Ov1BsAfacLQvG0dcpK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa2993dc35b9413e3209ab9fafa937b0_JaffaCakes118
Files
-
aa2993dc35b9413e3209ab9fafa937b0_JaffaCakes118.exe windows:6 windows x86 arch:x86
f51d832a66d364a6f3efe0156ab6f01a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
StrStrNIW
winscard
SCardFreeMemory
kernel32
GetStringTypeExA
GetUserGeoID
UnlockFile
SetTapePosition
CreateMutexExA
SetProcessWorkingSetSizeEx
SetNamedPipeHandleState
SetCurrentConsoleFontEx
GetLocalTime
GetThreadLocale
GetCurrentProcess
GetProcessId
GetCommandLineW
CloseHandle
TryEnterCriticalSection
Heap32Next
setupapi
SetupScanFileQueueW
oleaut32
SafeArrayDestroyData
LPSAFEARRAY_UserSize
crypt32
CryptRegisterOIDFunction
CryptMsgOpenToEncode
user32
PrintWindow
UserHandleGrantAccess
MenuItemFromPoint
GetThreadDesktop
GetCursor
GetWindowDC
GetWindowInfo
DdeSetQualityOfService
advapi32
CryptGenKey
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.CRT Size: 84KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ