K:\front\username\abstract\databas.pdb
Static task
static1
Behavioral task
behavioral1
Sample
baa772483d520692faf5ac0bf05f7cfb_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
baa772483d520692faf5ac0bf05f7cfb_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
baa772483d520692faf5ac0bf05f7cfb_JaffaCakes118
-
Size
435KB
-
MD5
baa772483d520692faf5ac0bf05f7cfb
-
SHA1
a6e3a4018f50f2906716880166f2056e4dd2afca
-
SHA256
b66e16083175b7ee33458a5f6aa57453cec8d21b9d9a5b5854e3cabfcb2aa413
-
SHA512
1ebd0b2cb742e72c0fedb50ac3fcaf7c425119f04846740032fbf4fd5b86a50fcd4ea2b81f1084d2e76ad735af474d300c4d872fb7339dfc02de22d9c9a69e7b
-
SSDEEP
6144:jxz9Oivnkb6Lf3Oguf3Jn3kyt+43CQlKJeHrh+n0K/HpIGKQ3YnmfvG3:jxVvnIk/Ogq9rHV9+n06CGF8mfvq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource baa772483d520692faf5ac0bf05f7cfb_JaffaCakes118
Files
-
baa772483d520692faf5ac0bf05f7cfb_JaffaCakes118.exe windows:5 windows x86 arch:x86
70a942ec0be84f9bc9246ff56cc3fc63
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB Paths
Imports
kernel32
HeapReAlloc
HeapSize
GetTimeZoneInformation
GetStringTypeW
LCMapStringW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
GetStdHandle
WriteFile
LoadLibraryW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
IsProcessorFeaturePresent
GetStartupInfoW
HeapSetInformation
GetCommandLineA
DecodePointer
ExitProcess
GetModuleHandleW
GetProcAddress
RtlUnwind
RaiseException
CompareStringW
lstrlenA
FindResourceA
LoadResource
LockResource
UnhandledExceptionFilter
FreeResource
SizeofResource
lstrcmpiW
GetProcessHeap
HeapAlloc
HeapFree
GetUserDefaultLangID
FindResourceExW
lstrcmpiA
GetLastError
GetSystemTime
HeapCreate
CreateFileA
GetFileInformationByHandle
CloseHandle
GetEnvironmentStrings
FreeEnvironmentStringsA
GetEnvironmentStringsW
GetStartupInfoA
MultiByteToWideChar
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
Sleep
GlobalLock
GetModuleHandleA
TerminateProcess
SetEnvironmentVariableA
user32
LoadIconA
LoadCursorA
GetSysColorBrush
CreateWindowExW
UpdateWindow
GetMessageA
IsWindow
DispatchMessageA
DialogBoxParamA
GetClassInfoExA
AppendMenuA
ShowWindow
ReleaseDC
GetMenu
CreateMenu
RegisterClassExA
ShowCursor
TranslateMessage
GetDC
SystemParametersInfoA
SetScrollInfo
BeginPaint
GetScrollInfo
EndPaint
PostQuitMessage
ScrollWindow
DefWindowProcA
SendMessageA
GetClientRect
InvalidateRect
UnregisterHotKey
GetParent
MapVirtualKeyA
GetKeyNameTextA
DrawTextA
LookupIconIdFromDirectory
CreateIconFromResource
GetWindow
GetClassNameW
SetMenu
SendMessageW
GetClassNameA
DestroyMenu
CreateWindowExA
LoadBitmapA
GetWindowRect
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
MessageBoxA
GetMenuItemCount
GetMenuStringA
GetMenuItemID
PostMessageA
CopyRect
GetWindowLongA
GetGuiResources
GetWindowDC
IsWindowEnabled
GetFocus
ClientToScreen
OffsetRect
DestroyAcceleratorTable
GetDlgItemTextW
wsprintfA
CreateDialogParamA
SetRect
GetDlgItem
gdi32
SetTextAlign
TextOutA
GetObjectA
CreateFontIndirectA
SetTextColor
CreateRectRgn
CombineRgn
ExcludeClipRect
CreateSolidBrush
Ellipse
EnumFontsA
GetTextMetricsA
Chord
DeleteObject
Pie
SelectObject
GetCurrentObject
CreatePen
advapi32
GetOldestEventLogRecord
OpenEventLogW
ReadEventLogA
shell32
SHGetSpecialFolderLocation
SHGetMalloc
SHGetFileInfoA
ole32
CoInitialize
CreateStreamOnHGlobal
ReleaseStgMedium
odbc32
ord75
ord24
ord39
ord12
ord19
ord7
ord72
ws2_32
inet_addr
avifil32
AVIFileInit
AVIFileOpenA
avicap32
capGetDriverDescriptionA
msvfw32
ICSendMessage
ICClose
ICCompressorChoose
ICCompressorFree
ICOpen
ICGetInfo
iphlpapi
SendARP
comctl32
InitCommonControlsEx
ord13
ord17
ImageList_LoadImageA
ImageList_SetOverlayImage
ImageList_GetIcon
gdiplus
GdiplusShutdown
GdiplusStartup
opengl32
glClear
glClearColor
uxtheme
DrawThemeBackground
powrprof
GetPwrCapabilities
Sections
.text Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.basa Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.odata Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ