C:\Jenkins\workspace\OC3.X\OC\Release\OCPacker.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b412b2b44a175686b1b0a15e4100b93b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b412b2b44a175686b1b0a15e4100b93b_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
b412b2b44a175686b1b0a15e4100b93b_JaffaCakes118
-
Size
882KB
-
MD5
b412b2b44a175686b1b0a15e4100b93b
-
SHA1
2a6bac678f0ade1b48aedfa8b4725377e0a14d90
-
SHA256
05006f0e99f261e886d7341ab75d066bc3d6bd11f50e209a98b52a60849e5d0c
-
SHA512
d661c60549954fce9093523c3776c1b14f0e0a3cffab951ee89915aaed6d493baff39777fbc7f7df2a29a22718cc7d4b069c7edcd382d773a2e8cdd4254a450e
-
SSDEEP
24576:z8NU1dZ3gmNzt+5vBaP23Vz/wvH4Okxs04Yns2gvDmNxy:YNUPZ3gB5vU2y4RxXi8y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b412b2b44a175686b1b0a15e4100b93b_JaffaCakes118
Files
-
b412b2b44a175686b1b0a15e4100b93b_JaffaCakes118.exe windows:5 windows x86 arch:x86
ad86f23a4822be6a448106edfd62afc9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
WriteFile
WideCharToMultiByte
ReadFile
CreateFileW
MultiByteToWideChar
GetCurrentDirectoryW
GetFileType
CloseHandle
LocalFree
FormatMessageW
GetSystemTimeAsFileTime
SetCurrentDirectoryW
SetFileAttributesW
GetFileAttributesW
LoadLibraryW
GetProcAddress
FreeLibrary
OutputDebugStringW
GetLastError
DeleteFileW
MoveFileW
MoveFileExW
FindResourceW
LoadResource
SizeofResource
GetTempPathW
GetTempFileNameW
GetCommandLineW
GetModuleHandleW
RemoveDirectoryW
GetCurrentThreadId
LockResource
SetFileTime
FlushFileBuffers
WriteConsoleW
SetStdHandle
GetConsoleMode
GetConsoleCP
RtlUnwind
HeapReAlloc
IsProcessorFeaturePresent
HeapSize
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
CreateDirectoryW
GetCurrentProcess
SystemTimeToFileTime
SetFilePointer
GetProcessHeap
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetStringTypeW
IsValidCodePage
GetOEMCP
GetACP
FindResourceExW
DosDateTimeToFileTime
HeapFree
HeapAlloc
HeapSetInformation
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
ExitProcess
DecodePointer
GetStdHandle
GetModuleFileNameW
EncodePointer
RaiseException
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCPInfo
user32
RegisterClassExW
PostQuitMessage
SetForegroundWindow
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
IsWindowVisible
EndPaint
wsprintfW
DefWindowProcW
MessageBoxW
CreateWindowExW
BeginPaint
GetSysColorBrush
LoadCursorW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
LoadStringW
SendMessageW
LoadIconW
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
shell32
ShellExecuteExW
SHFileOperationW
CommandLineToArgvW
SHGetFolderPathAndSubDirW
ole32
CoTaskMemFree
shlwapi
PathFileExistsW
comctl32
InitCommonControlsEx
Sections
.text Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 755KB - Virtual size: 755KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ