D:\USB\64bit\objfre_wnet_AMD64\amd64\UpdateUSB.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0ec2a2f82efdb8f163f3fde5ac0012f6_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0ec2a2f82efdb8f163f3fde5ac0012f6_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0ec2a2f82efdb8f163f3fde5ac0012f6_JaffaCakes118
-
Size
87KB
-
MD5
0ec2a2f82efdb8f163f3fde5ac0012f6
-
SHA1
ab77de3f5c068b6784a10fa962b94be66ec1cfef
-
SHA256
9e73b9588d3b21bd8ed27ecb57c6381c63b4a6d55b9ea5a668ee21b85d35cbd3
-
SHA512
381c7673343f393c041a32aa22766684fafc2cac0a861b8c30e0199fdd450333e4db0c42dc79bc2f751d34925d931ac35ef9f85bf1bceb1574388f34eb60edee
-
SSDEEP
1536:izKyiTGw+cgjqLBzQb5jYchThjXKXJMlL84CSM2+YlMBMd8rp:iMJgjqL1QdEch1EC58CJBlyMW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ec2a2f82efdb8f163f3fde5ac0012f6_JaffaCakes118
Files
-
0ec2a2f82efdb8f163f3fde5ac0012f6_JaffaCakes118.exe windows:5 windows x64 arch:x64
fe798b18ffad7402fbe64a78e81894b8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
advapi32
RegOpenKeyExA
RegDeleteValueA
kernel32
GetWindowsDirectoryA
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
RtlUnwindEx
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
LoadLibraryA
Sleep
GetACP
GetOEMCP
GetCPInfo
SetFilePointer
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
SetStdHandle
GetLocaleInfoA
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
CloseHandle
newdev
UpdateDriverForPlugAndPlayDevicesA
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nmkxinj Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iivdggn Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE