D:\DEVE1OPMENT\VC+-\Cry4tor54volu\iongold\release\main.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1bf7118a56f22093ac9951b061595f7f_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1bf7118a56f22093ac9951b061595f7f_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1bf7118a56f22093ac9951b061595f7f_JaffaCakes118
-
Size
191KB
-
MD5
1bf7118a56f22093ac9951b061595f7f
-
SHA1
65c29da3ea9e66499b41834de9ba853e3ddc4957
-
SHA256
8bae50fce5d6e08a0d194f1e8e301cce39b5e5e21f204e384d144b22c9c553ed
-
SHA512
b9e225c0ab691eea94a68f46536385a546ab7eafee1c4d5102c206971423582c6f266a5945e9e2c622968e2453fc226673e24541c04a65be9ddca00ade81449f
-
SSDEEP
3072:XHWoqyq/QApMeIjWr0oBTdbMSeJ95il/hlEwE4sOTcNhMHZjGQ9J3HYJT84:XHWoq20KAXTMS2vggwEVOTGef34JT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1bf7118a56f22093ac9951b061595f7f_JaffaCakes118
Files
-
1bf7118a56f22093ac9951b061595f7f_JaffaCakes118.exe windows:4 windows x86 arch:x86
f945d5ffcc03a717fd7962c52e1943ea
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetTempFileNameA
GetFileAttributesA
FindFirstChangeNotificationA
DeleteFileA
CopyFileA
CreateDirectoryA
ResetEvent
WaitForMultipleObjects
InterlockedCompareExchange
InterlockedIncrement
GetTimeFormatA
InterlockedExchange
GetVolumeInformationW
SetLastError
ExitProcess
GetCurrentProcessId
GetFileTime
GetModuleFileNameW
FindCloseChangeNotification
FindNextChangeNotification
HeapWalk
HeapReAlloc
HeapAlloc
HeapCreate
HeapFree
CreateProcessW
Sleep
FreeLibrary
LoadLibraryA
GetProcAddress
GetCurrentThreadId
GetCommandLineA
GetModuleHandleA
MoveFileW
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
HeapSize
VirtualQuery
RtlUnwind
VirtualAlloc
GetCPInfo
GetOEMCP
GetACP
VirtualFree
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetSystemInfo
GetLastError
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
WriteFile
GetCurrentProcess
TerminateProcess
GetVersionExA
GetStartupInfoA
user32
CreatePopupMenu
GetDoubleClickTime
SetCursor
IntersectRect
InsertMenuItemA
ClientToScreen
InflateRect
IsClipboardFormatAvailable
SetForegroundWindow
DrawIcon
LoadImageA
OffsetRect
SendDlgItemMessageW
TrackPopupMenu
GetCursorPos
RegisterClassExA
GetClassInfoExA
GetSysColorBrush
GetActiveWindow
AppendMenuA
GetWindowLongA
CallWindowProcA
DrawFrameControl
FillRect
IsDialogMessageW
PostMessageA
CreateDialogIndirectParamA
DialogBoxIndirectParamA
SetWindowLongA
CheckRadioButton
EndDialog
ws2_32
WSASocketA
WSAGetOverlappedResult
WSACreateEvent
WSAConnect
socket
WSAStartup
WSACleanup
accept
bind
closesocket
connect
gethostbyaddr
Sections
.text Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 940B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ