U:\develop\global\Release\bin\common\AcDelTree.pdb
Static task
static1
Behavioral task
behavioral1
Sample
164147cfd26794c15e37f44effa2952d_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
164147cfd26794c15e37f44effa2952d_JaffaCakes118
-
Size
219KB
-
MD5
164147cfd26794c15e37f44effa2952d
-
SHA1
c24a0aa9b75a3902afbd707fce255f24729dca19
-
SHA256
e9a45128dfa76d21be4b6b5bb1c8a889b620bc4246d886619d1cd13b93a60994
-
SHA512
e9ed777955d576260687b0fa83c1c420bc661563e6018448aea0b1a8da950e1a25a7dcdd18b79be80b06e00c0e277dad2db9ef43db09a6c91e8d3ea35b1a8bb1
-
SSDEEP
3072:8GATuVx0h3ooEimknFxm0wRWcRgAG5AGz6dtQh7Gvu9AxO/4+VUWFD5Azs:8Trh3ooTmExm0wRGl0G/yWFL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 164147cfd26794c15e37f44effa2952d_JaffaCakes118
Files
-
164147cfd26794c15e37f44effa2952d_JaffaCakes118.exe windows:4 windows x86 arch:x86
d3952772fc06f7bbbdcb104299ace264
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
PathRemoveBackslashW
StrCpyW
shell32
SHFileOperationW
kernel32
HeapDestroy
FlushFileBuffers
OpenMutexW
WaitForSingleObject
lstrlenW
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
FatalAppExitA
InterlockedIncrement
InterlockedDecrement
GetProcAddress
GetModuleHandleA
ExitProcess
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapValidate
IsBadReadPtr
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapCreate
VirtualFree
GetModuleFileNameA
WriteFile
GetACP
GetOEMCP
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
LoadLibraryA
InitializeCriticalSection
HeapReAlloc
VirtualAlloc
RtlUnwind
WideCharToMultiByte
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
SetFilePointer
GetConsoleCP
GetConsoleMode
RaiseException
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateFileA
CloseHandle
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE