D:\Programming\C++\Work\Windows\ConquerMOD\Release\ConquerLoader.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1aca51ee2ac0abbf8a44381cf9ee20cc_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1aca51ee2ac0abbf8a44381cf9ee20cc_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1aca51ee2ac0abbf8a44381cf9ee20cc_JaffaCakes118
-
Size
161KB
-
MD5
1aca51ee2ac0abbf8a44381cf9ee20cc
-
SHA1
bd5dbfdfe698116e63b0e15c9912a15c86d65580
-
SHA256
f8cbd8d94dd5023fb4825d4425628797316e07b0c34e5824016919b8143bce69
-
SHA512
0b216b02da594953a7a2069020f3d347c41319c0745ae35ebef720bf0c5e7bc5aebcc2ee84f4c9e8037d24136bde2843454be3d761dc0d25d03424ecdea5e657
-
SSDEEP
3072:twgcGymQlYOSAeSlwGZcI/n/zLRCKdYb2QmUEkdTYUuy:twEymQKgZcIf/4EYhLpcUu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1aca51ee2ac0abbf8a44381cf9ee20cc_JaffaCakes118
Files
-
1aca51ee2ac0abbf8a44381cf9ee20cc_JaffaCakes118.exe windows:5 windows x86 arch:x86
fd7832ff3a2d2a9333a212c62dc8c8ad
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
WaitForSingleObject
CreateRemoteThread
VirtualFreeEx
CreateProcessA
GetLastError
GetProcAddress
VirtualAllocEx
GetModuleHandleA
WriteProcessMemory
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent
user32
WaitForInputIdle
MessageBoxA
ws2_32
WSAStartup
msvcr90
_initterm
_initterm_e
_acmdln
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
sprintf
_configthreadlocale
memset
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 153KB - Virtual size: 153KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 490B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ