hews.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b82b6b7a48bf4e049cb4c338b18921eb_JaffaCakes118.exe
Resource
win7-20240419-en
General
-
Target
b82b6b7a48bf4e049cb4c338b18921eb_JaffaCakes118
-
Size
136KB
-
MD5
b82b6b7a48bf4e049cb4c338b18921eb
-
SHA1
41b9ee9deac56d3ad5ca11ca2db408ea67567b93
-
SHA256
c7c64507d9df7bc28d251132cb309b54b86e939d5e2e21894e0573e9a1ec9ddc
-
SHA512
ed02bf9522a1ff367a68103020242c623520809f168fa2d46202f26e19022bfc5f291cda08dc030e57ae5d7aa7fb356ce71ca74cbf506f97e9fbcb0e60cc6d5b
-
SSDEEP
1536:ylQ1YOZpCGwKrKNDiVTzHvHTmaNBzkRNwmX2IlpI0cuF/2:h1YMpCGw5pqSaNBzrox2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b82b6b7a48bf4e049cb4c338b18921eb_JaffaCakes118
Files
-
b82b6b7a48bf4e049cb4c338b18921eb_JaffaCakes118.exe windows:5 windows x86 arch:x86
4183d940803b626eb42bed7bec8cb6a9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM
PDB Paths
Imports
msvfw32
ICOpenFunction
winscard
SCardLocateCardsW
gdi32
CreateDiscardableBitmap
shlwapi
SHQueryInfoKeyW
PathUnmakeSystemFolderW
PathIsNetworkPathW
lz32
LZInit
urlmon
ReleaseBindInfo
oleaut32
VarCyMul
VarCyCmp
VarBstrFromCy
kernel32
SetConsoleTextAttribute
GetBinaryTypeA
lstrlenA
WaitNamedPipeA
GetModuleHandleW
lstrcatA
GetWindowsDirectoryA
GetModuleFileNameA
GetComputerNameExA
ReadProcessMemory
GetCurrentProcess
setupapi
SetupDiGetDeviceInterfaceDetailA
advapi32
RegDeleteValueA
ole32
CoIsOle1Class
ws2_32
htonl
user32
VkKeyScanA
IsRectEmpty
GetQueueStatus
TranslateMessage
comctl32
ImageList_GetImageInfo
rpcrt4
I_RpcSend
RpcNetworkIsProtseqValidW
NdrInterfacePointerBufferSize
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.erloc Size: 104KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.CRT Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ