bomgar-scc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
16956bc3e254de460edb128d9a869f14_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
16956bc3e254de460edb128d9a869f14_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
16956bc3e254de460edb128d9a869f14_JaffaCakes118
-
Size
897KB
-
MD5
16956bc3e254de460edb128d9a869f14
-
SHA1
1d0e4b28c676c219e0a697a7f2aeaa0ffe732408
-
SHA256
cf1cea02d2fcbb0f84a96c2b4ae6d132ad304d17ba2da79adf26e663363ef4f9
-
SHA512
9e752221c493739d26924e2247d43f308a8af739c17dd27a1f7ccdb4d3c8e219f78fafee755cc251690d55696c9ab959446eb9ab4f030f0fbaf6da1efd8a221a
-
SSDEEP
24576:iWmQ2/UX0qnPkXll+UBJUK/61atfet84iStgn6m:C/UXFUYUPUWnZcHiStgn6m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16956bc3e254de460edb128d9a869f14_JaffaCakes118
Files
-
16956bc3e254de460edb128d9a869f14_JaffaCakes118.exe windows:5 windows x86 arch:x86
cb3efa0ad7f36ad9ee06464582a55c85
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetWindowTextW
gdi32
ExtTextOutW
comdlg32
GetSaveFileNameW
advapi32
DeleteService
shell32
SHBrowseForFolderW
ole32
CoCreateInstance
oleaut32
SysAllocStringByteLen
crypt32
CryptHashPublicKeyInfo
shlwapi
StrRetToBufW
comctl32
ImageList_Create
cfgmgr32
CM_Enumerate_Classes
setupapi
SetupDiGetDeviceRegistryPropertyW
userenv
CreateEnvironmentBlock
ws2_32
gethostbyaddr
version
GetFileVersionInfoSizeW
winmm
timeGetTime
Sections
.text Size: 871KB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE