Z:\source\cs 1.6\cs-1.6-main\hack\loader.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0f22699907cf4e62737fb73ca43d3408_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0f22699907cf4e62737fb73ca43d3408_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0f22699907cf4e62737fb73ca43d3408_JaffaCakes118
-
Size
3.7MB
-
MD5
0f22699907cf4e62737fb73ca43d3408
-
SHA1
6b8547957943d41c44d9335afb7d46c82546539e
-
SHA256
f0737ce33c6039365f2a12390d805f085dd57216f898f64823921a468ccd2108
-
SHA512
db5cb0ce569a790eff684bee648c3dd01066fefee99567183e73102af8297fabff4680b8c47032a003bed14afe85b976f37643152f12849bbeb468c4b7a9049e
-
SSDEEP
98304:JIVqoVc9j2hG0KXhCGpljzvkZTKlKFblCh+gulWTMNzrL:JWVpjC0GpxwTKkFRCUgulYA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f22699907cf4e62737fb73ca43d3408_JaffaCakes118
Files
-
0f22699907cf4e62737fb73ca43d3408_JaffaCakes118.exe windows:6 windows x86 arch:x86
0b5fe1744f27b6e6bf363e06908babef
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
CloseHandle
WaitForSingleObject
Sleep
GetCurrentProcessId
CreateRemoteThread
GetExitCodeThread
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
OpenProcess
GetVersionExA
WriteProcessMemory
GetModuleHandleA
FindFirstFileA
GetLastError
CreateMutexA
GetTickCount
GetModuleFileNameA
SetThreadExecutionState
MultiByteToWideChar
InitializeCriticalSection
EnterCriticalSection
QueryPerformanceCounter
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
IsBadReadPtr
LoadLibraryA
GetProcAddress
FreeLibrary
VirtualFree
VirtualProtect
VirtualAlloc
GetNativeSystemInfo
GetProcessHeap
InitializeSListHead
GetSystemTimeAsFileTime
GetStartupInfoW
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
LeaveCriticalSection
UnhandledExceptionFilter
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
WideCharToMultiByte
VerSetConditionMask
FormatMessageW
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
SetEvent
GetModuleHandleW
ResetEvent
WaitForSingleObjectEx
CreateEventW
IsProcessorFeaturePresent
QueryPerformanceFrequency
HeapFree
HeapAlloc
SetLastError
user32
ScreenToClient
EnumDisplayMonitors
EnumDisplayDevicesW
EnumDisplaySettingsExW
EnumDisplaySettingsW
ChangeDisplaySettingsExW
ToUnicode
UnregisterDeviceNotification
RegisterDeviceNotificationW
GetRawInputDeviceList
GetRawInputDeviceInfoA
RegisterRawInputDevices
GetRawInputData
GetMonitorInfoW
MonitorFromWindow
OpenClipboard
SystemParametersInfoW
CreateIconIndirect
LoadImageW
DestroyIcon
LoadCursorW
GetClassLongW
SetWindowLongW
CloseClipboard
GetWindowLongW
SetClipboardData
GetClipboardData
PtInRect
SetRect
ClipCursor
WindowFromPoint
AdjustWindowRectEx
EmptyClipboard
SetWindowPos
SetWindowTextW
RemovePropW
GetPropW
SetPropW
RedrawWindow
GetActiveWindow
GetKeyState
ReleaseDC
SetCapture
GetDC
ReleaseCapture
GetClientRect
SetForegroundWindow
MsgWaitForMultipleObjects
MapVirtualKeyW
SetFocus
IsZoomed
BringWindowToTop
IsIconic
IsWindowVisible
SetWindowPlacement
GetWindowPlacement
MoveWindow
FlashWindow
SetLayeredWindowAttributes
GetLayeredWindowAttributes
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassExW
UnregisterClassW
DefWindowProcW
WaitMessage
PostMessageW
SendMessageW
GetMessageTime
PeekMessageW
DispatchMessageW
TranslateMessage
TrackMouseEvent
GetWindowRect
LoadCursorA
SetCursorPos
CallWindowProcA
GetSystemMetrics
SetCursor
MessageBoxA
GetWindowLongA
SetWindowLongA
ClientToScreen
GetCursorPos
shell32
DragFinish
DragQueryPoint
DragQueryFileW
ShellExecuteA
DragAcceptFiles
opengl32
glClear
glReadPixels
glScissor
glGetString
wglGetProcAddress
glViewport
glVertexPointer
glTexParameteri
glTexImage2D
glTexCoordPointer
glClearColor
glPushMatrix
glPushAttrib
glPopMatrix
glPopAttrib
glPolygonMode
glPixelStorei
glOrtho
glMatrixMode
glGetIntegerv
glGenTextures
glEnableClientState
glEnable
glDrawElements
glDisableClientState
glDisable
glDeleteTextures
glColorPointer
glBlendFunc
glBindTexture
glLoadIdentity
msvcp140
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
??Bid@locale@std@@QAEIXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
imm32
ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow
vcruntime140
__std_terminate
memset
__std_type_info_destroy_list
_except_handler4_common
__current_exception_context
__current_exception
strrchr
strstr
strchr
__std_exception_copy
memmove
memcpy
__CxxFrameHandler3
_CxxThrowException
__std_exception_destroy
api-ms-win-crt-runtime-l1-1-0
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
terminate
_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
_get_narrow_winmain_command_line
_invalid_parameter_noinfo_noreturn
_initterm
_initterm_e
_exit
_c_exit
_register_thread_local_exe_atexit_callback
_controlfp_s
_execute_onexit_table
_crt_at_quick_exit
exit
api-ms-win-crt-string-l1-1-0
strncpy
isprint
strspn
strcspn
strcat_s
strcpy_s
tolower
toupper
strncmp
_stricmp
api-ms-win-crt-heap-l1-1-0
free
calloc
realloc
_callnewh
malloc
_set_new_mode
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf
__stdio_common_vfprintf
fclose
fseek
__stdio_common_vsscanf
__acrt_iob_func
_get_stream_buffer_pointers
_set_fmode
fopen
__p__commode
_wfopen
feof
ungetc
setvbuf
fwrite
_fseeki64
fsetpos
fread
fputc
fgetpos
fgetc
fflush
ftell
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
api-ms-win-crt-math-l1-1-0
ldexp
_libm_sse2_acos_precise
ceil
floor
_libm_sse2_pow_precise
__setusermatherr
_libm_sse2_sqrt_precise
_CIfmod
_except1
_libm_sse2_cos_precise
_CIatan2
_libm_sse2_sin_precise
api-ms-win-crt-utility-l1-1-0
qsort
rand
api-ms-win-crt-convert-l1-1-0
atof
strtol
strtoul
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
gdi32
SetDeviceGammaRamp
GetDeviceGammaRamp
GetDeviceCaps
CreateBitmap
CreateRectRgn
DeleteObject
CreateDIBSection
ChoosePixelFormat
DescribePixelFormat
SetPixelFormat
SwapBuffers
CreateDCW
DeleteDC
Sections
.text Size: 502KB - Virtual size: 501KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.msvcjmc Size: 512B - Virtual size: 422B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ