sc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0bbb3a3b044815f0331101f7fb2eb8f9_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0bbb3a3b044815f0331101f7fb2eb8f9_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0bbb3a3b044815f0331101f7fb2eb8f9_JaffaCakes118
-
Size
54KB
-
MD5
0bbb3a3b044815f0331101f7fb2eb8f9
-
SHA1
fcb9af9ed5d4469c49392774aadd9dbb247b17ad
-
SHA256
671b8ee6a1404446dd04bcf3ecaad149dbd9dc6e3a87ba3a0bd41ed39e0f0cda
-
SHA512
0649dc3e27dc92e21926510620dfea83189d5f332d782d6f67bdc814e4ea7c439db5956c39784190c5bfbb9fdae12347e6fcd8c7f5c22c9ada1ee02b215958ce
-
SSDEEP
768:/13KMpusnG2FZXbhbUCJH2A/GWRIgzmattj96omJNb0gNATLoUtVyjREGeED6aTF:/14snlJHhrLt+J/yTLoCAjRsED9F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bbb3a3b044815f0331101f7fb2eb8f9_JaffaCakes118
Files
-
0bbb3a3b044815f0331101f7fb2eb8f9_JaffaCakes118.exe windows:5 windows x86 arch:x86
15b7db8e6cd545c3c8113dfcd89d34e9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
_c_exit
wcsncmp
wcscmp
_exit
_wtol
wcscpy
_wcsicmp
wcslen
_XcptFilter
_cexit
exit
__winitenv
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
printf
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_getche
advapi32
QueryServiceObjectSecurity
OpenSCManagerW
StartServiceW
QueryServiceStatusEx
DeleteService
NotifyBootConfigStatus
GetServiceDisplayNameW
GetServiceKeyNameW
EnumServicesStatusW
EnumServiceGroupW
EnumServicesStatusExW
QueryServiceStatus
LockServiceDatabase
UnlockServiceDatabase
QueryServiceLockStatusW
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetServiceObjectSecurity
ConvertSecurityDescriptorToStringSecurityDescriptorW
EnumDependentServicesW
CreateServiceW
CloseServiceHandle
ChangeServiceConfigW
ControlService
RegOpenKeyExW
RegQueryValueExW
QueryServiceConfigW
OpenServiceW
QueryServiceConfig2W
ChangeServiceConfig2W
ConvertSidToStringSidW
RegCloseKey
kernel32
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
LoadLibraryW
GetProcAddress
FreeLibrary
LocalFree
LocalAlloc
GetLastError
FormatMessageW
GetModuleHandleA
ntdll
RtlInitUnicodeString
RtlAdjustPrivilege
RtlNtStatusToDosError
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.cdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE