g:\Acro_root_apms\build\Release-results\info\template.pdb
Static task
static1
Behavioral task
behavioral1
Sample
04b7b16c6c75b0853dc8b71ed8868286_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
04b7b16c6c75b0853dc8b71ed8868286_JaffaCakes118
-
Size
159KB
-
MD5
04b7b16c6c75b0853dc8b71ed8868286
-
SHA1
fb0cf70abc99cd08afdb61039e09e3f4bd06fc08
-
SHA256
6abcb7f626001523924463e8e10673a2aeff1a0f96ad9560c2f41ae6cc23b28b
-
SHA512
ce02923fa8797fd180aab0270985ba0f01c87b5df910cc9f94f6e2829eff7fab13a5cdabd6a29c8b0eeadff32f483b9e0baa6076c80c1d9605351b5147c106d6
-
SSDEEP
3072:0Dvv4aZfEPiWuhs77V6m7v6rxdYYPGU3y9aFI:qcNuhO6wGx2ErFI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04b7b16c6c75b0853dc8b71ed8868286_JaffaCakes118
Files
-
04b7b16c6c75b0853dc8b71ed8868286_JaffaCakes118.exe windows:4 windows x86 arch:x86
fc60a920495dd603b6329f9f82fb28de
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetModuleFileNameW
GetProcAddress
LoadLibraryW
HeapFree
GetFileAttributesW
HeapAlloc
GetProcessHeap
GetCommandLineW
SetStdHandle
ExitProcess
CreateFileW
GetModuleHandleW
shell32
CommandLineToArgvW
msi
ord173
ord205
user32
MessageBoxW
shlwapi
AssocQueryStringW
StrCmpW
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE