d:\programming\work\runexpl\runexpl\runexpl2\runexpl\Release\smphost.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1bca1ff29cd73c0d6daf5710a4b9bcdf_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1bca1ff29cd73c0d6daf5710a4b9bcdf_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1bca1ff29cd73c0d6daf5710a4b9bcdf_JaffaCakes118
-
Size
168KB
-
MD5
1bca1ff29cd73c0d6daf5710a4b9bcdf
-
SHA1
a65e5236b9c7b82131a7e34a13650cdc205e2927
-
SHA256
46a5e470d0f05243a9aeb40a8bf5e9805b42957055a8595e6136e5c82ed0f3f6
-
SHA512
ddcc66ad4b14b34df9573289760dd3f0bc712512b1882ea1fd700a7e8ab6d001d73e16544e778fd0c3e08b4baa1abd5edb741b243f5e9b8bc2891f0464f20722
-
SSDEEP
3072:lTvL5e50857bo9oPEajI7AYHfQtMjr0pkd:lTvQf57bYOtYHdn0pi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1bca1ff29cd73c0d6daf5710a4b9bcdf_JaffaCakes118
Files
-
1bca1ff29cd73c0d6daf5710a4b9bcdf_JaffaCakes118.exe windows:4 windows x86 arch:x86
a0b3e3992e36b4f893be7fc36ee4f91a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
psapi
GetModuleFileNameExW
kernel32
CreateFileW
GetFileSize
GetACP
ReadFile
CloseHandle
OpenSemaphoreW
WaitForSingleObject
CreateProcessA
ReleaseSemaphore
Sleep
CreateProcessW
OpenProcess
GetVersionExA
CreateSemaphoreW
WriteConsoleW
GetTickCount
GetModuleFileNameW
WriteFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
RaiseException
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
HeapSize
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetCPInfo
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
CreateFileA
InitializeCriticalSection
SetStdHandle
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LoadLibraryA
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetFilePointer
SetEndOfFile
WriteConsoleA
GetConsoleOutputCP
user32
GetKeyboardState
GetActiveWindow
CharLowerW
advapi32
RegSetValueExW
RegCreateKeyExW
GetUserNameW
Sections
.text Size: 88KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ