e:\pcdata\install\install\objfre_wnet_AMD64\amd64\install.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0709fd721e486fc3091542ff7e4a0b49_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0709fd721e486fc3091542ff7e4a0b49_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0709fd721e486fc3091542ff7e4a0b49_JaffaCakes118
-
Size
33KB
-
MD5
0709fd721e486fc3091542ff7e4a0b49
-
SHA1
674cf5ad893e06c7805088216051626417e97423
-
SHA256
8d1c9039f23e3a53e848567cefebcf8009f5218984c9c741aff363bfce102476
-
SHA512
88bf5b7275574c99a1bce837a15f359f87791de54ed895b6b8362d0e6bdb66fd887744c448a73533f82e7e30884561d35bb010f5246caba03a40b7d5af1c28e1
-
SSDEEP
768:kpJJWgWOg23T7sLijLNQTIuNBisKl4qf:OJJW4hTLbuNBisKldf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0709fd721e486fc3091542ff7e4a0b49_JaffaCakes118
Files
-
0709fd721e486fc3091542ff7e4a0b49_JaffaCakes118.exe windows:5 windows x64 arch:x64
8acc4abb8a4d6913113d36cb4e9f7490
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
SetLastError
GetLastError
lstrlenA
LocalAlloc
LocalFree
FindFirstFileA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
RtlUnwindEx
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapSetInformation
HeapCreate
LoadLibraryA
Sleep
GetACP
GetOEMCP
GetCPInfo
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
setupapi
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiCallClassInstaller
SetupDiSetDeviceRegistryPropertyA
SetupDiCreateDeviceInfoA
SetupDiCreateDeviceInfoList
SetupDiGetINFClassA
newdev
UpdateDriverForPlugAndPlayDevicesA
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 1020B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�� Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ