C:\hotsend\Release-Win32\hotsend.pdb
Static task
static1
Behavioral task
behavioral1
Sample
08d0e858b41a87ed7823bf05c095007c_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
08d0e858b41a87ed7823bf05c095007c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
08d0e858b41a87ed7823bf05c095007c_JaffaCakes118
-
Size
45KB
-
MD5
08d0e858b41a87ed7823bf05c095007c
-
SHA1
7f52d69c67e6fd13a8e6fcee8843c183b7870141
-
SHA256
93f1dfb427bb0610bb37cec135b10e88cbf9121a964cf354adf2e723e890f959
-
SHA512
6556db1fadab779e6a3571a2d45cc2445f4dec38712765eabd20bb8531384b97060902958587a8f7273ced32a68846c82fe157d8d24d53dc551a1497f1a28829
-
SSDEEP
768:vrKg6cbSOtxdpUnSG1q5eXnppMd2gr/0z0+XXV2GiXqyNRjNnVYLowrRL2adOnE2:DKgBSOtp50Q2g00+HV2Gm58owrt2adOf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08d0e858b41a87ed7823bf05c095007c_JaffaCakes118
Files
-
08d0e858b41a87ed7823bf05c095007c_JaffaCakes118.exe .js windows:5 windows x86 arch:x86 polyglot
a50ab9c880c92afd7862b990df6c50b5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
HeapAlloc
HeapFree
OutputDebugStringA
CloseHandle
LeaveCriticalSection
SetEvent
EnterCriticalSection
WaitForSingleObject
ResumeThread
CreateThread
CreateEventA
InitializeCriticalSection
HeapCreate
GetTimeZoneInformation
GetLocalTime
GetSystemTimeAsFileTime
CreateMutexA
GetTickCount
Sleep
GetTempPathA
ReadFile
GetFileSize
CreateFileA
WriteFile
WaitForMultipleObjects
GetSystemTime
lstrlenA
lstrcpynA
lstrcmpA
lstrcpyA
lstrcatA
lstrcmpiA
GetModuleHandleA
GetLastError
SystemTimeToFileTime
ExitProcess
GetStartupInfoA
ole32
CoCreateGuid
ws2_32
gethostbyname
inet_addr
connect
htons
closesocket
socket
recv
WSAStartup
send
secur32
FreeCredentialsHandle
InitSecurityInterfaceA
msvcrt
strncpy
memchr
_vsnprintf
_except_handler3
_itoa
atoi
strchr
_snprintf
strstr
_stricmp
qsort
free
malloc
memmove
sprintf
sscanf
_c_exit
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
memset
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ