c:\savxp\src\symbols\setup.pdb
Static task
static1
Behavioral task
behavioral1
Sample
084c31d3f5e32854ffb8e7683e334623_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
084c31d3f5e32854ffb8e7683e334623_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
084c31d3f5e32854ffb8e7683e334623_JaffaCakes118
-
Size
72KB
-
MD5
084c31d3f5e32854ffb8e7683e334623
-
SHA1
99363ae5b7a71e66fe37567ce0ab86da379f8b14
-
SHA256
f8a385be466172cc409831b8b67de80d443d4f2b8f82f6ee7f306b8d4f70b393
-
SHA512
437ba874125954971ceb950ce0bb78ed86dc5df738d151bbaf109344c5fb0528366906f7a1aaf2e5cf3d603c374d1585ccc8163d0fbcde87f45bdbae5e5b484c
-
SSDEEP
768:FLuyWtypi3bn1/rMymTdIByOlvnau4EN0p4DvmYv1+EbR1c2jmufN4t5ZhQHF:Iyw3bn9prRRau06Dv1NBbrhmhtLhQHF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 084c31d3f5e32854ffb8e7683e334623_JaffaCakes118
Files
-
084c31d3f5e32854ffb8e7683e334623_JaffaCakes118.exe windows:4 windows x86 arch:x86
503ed85b1a2e771da86d59bc8fe0bf07
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetVersionExA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
RemoveDirectoryA
DeleteFileA
CreateDirectoryA
GetFileAttributesA
ExitProcess
FindNextFileA
FindFirstFileA
MultiByteToWideChar
GetTempPathA
GetLastError
GetModuleFileNameA
GetModuleHandleA
FormatMessageA
FindClose
LocalFree
InitializeCriticalSection
LoadLibraryA
HeapSize
RtlUnwind
RaiseException
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
Sleep
GetLocaleInfoA
VirtualAlloc
HeapReAlloc
user32
LoadStringA
wsprintfA
MessageBoxA
advapi32
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegDeleteKeyA
RegCloseKey
RegQueryValueExA
shell32
ShellExecuteA
ole32
CoCreateInstance
CoUninitialize
CoInitialize
Sections
.text Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ