C:\Perforce\FRMain\code\build\win\results\Release\info\arh.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0764c88538f6dc4033ad40d52bc85adc_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
0764c88538f6dc4033ad40d52bc85adc_JaffaCakes118
-
Size
476KB
-
MD5
0764c88538f6dc4033ad40d52bc85adc
-
SHA1
ed8033d9cfb4cc325a736702000679fe7e838124
-
SHA256
b4165d91c1daa98610c00e67d4afdd1b87616f54c29361b07c406a8e6acce3a4
-
SHA512
3ff23fad46eb845a091278c0cd7b2ce5df8a785fe73d3d4bee2c1944ee2eb0376a6c6045f3dca341e1265eabf9acd78e672edc9601f1e7da580fbdd42e6b6528
-
SSDEEP
12288:RYmIjE7eNdKcWEb72Ubr4TgyUbZm6qCs8e/G:r7eNAYb72Ub8T5geL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0764c88538f6dc4033ad40d52bc85adc_JaffaCakes118
Files
-
0764c88538f6dc4033ad40d52bc85adc_JaffaCakes118.exe windows:5 windows x86 arch:x86
085b8a5d9e723b8ba9982a936ce1c779
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
WideCharToMultiByte
CreateFileA
HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
LocalFree
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
WriteFile
SetFilePointer
WriteConsoleW
GetFileType
GetStdHandle
GetModuleFileNameW
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStartupInfoA
Sleep
GetModuleHandleW
GetProcAddress
ExitProcess
LoadLibraryW
RaiseException
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
VirtualAlloc
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
LoadLibraryA
RtlUnwind
WriteConsoleA
GetConsoleOutputCP
SetStdHandle
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
msi
ord141
ord90
ord205
ord173
ord16
shlwapi
PathAppendW
PathRemoveFileSpecW
StrDupW
StrChrA
PathAppendA
advapi32
CryptAcquireContextW
CryptDestroyHash
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
CryptReleaseContext
CryptCreateHash
CryptHashData
CryptGetHashParam
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 404KB - Virtual size: 996KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ