ping.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2182380765685ffe62e9b1a1880669ee_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2182380765685ffe62e9b1a1880669ee_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2182380765685ffe62e9b1a1880669ee_JaffaCakes118
-
Size
42KB
-
MD5
2182380765685ffe62e9b1a1880669ee
-
SHA1
6007716ba305a3b7aa502cece772489afa675eae
-
SHA256
a1e552edba80101ed5736404b73748a1302cf8750db2b63f68ffb26e858ef8a4
-
SHA512
3cf05268413876c55b0550f1e23f380a07bd493647263fd7e3ed31563cb0223c4d899bbe4da5ab53ca18b413f9ef079c2d51226904657afd352ecafb2b7d8804
-
SSDEEP
768:DlWE0F7gle1jwK9EVGjg4JxPtsrWL9gRKPR9wQMeIphTmd:Dlf0F7tcer2rg60PR9wteIvTm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2182380765685ffe62e9b1a1880669ee_JaffaCakes118
Files
-
2182380765685ffe62e9b1a1880669ee_JaffaCakes118.exe windows:6 windows x86 arch:x86
608debbdfbeac87355579c189f9bdfc5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
kernel32
InterlockedCompareExchange
FormatMessageA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedExchange
LocalFree
Sleep
SetConsoleCtrlHandler
LocalAlloc
GetLastError
HeapSetInformation
SetThreadUILanguage
msvcrt
__p__commode
__setusermatherr
_amsg_exit
_initterm
_XcptFilter
_exit
__p__fmode
__getmainargs
memset
isspace
exit
strtoul
__set_app_type
memcpy
?terminate@@YAXXZ
_except_handler4_common
_controlfp
_cexit
_write
_setmode
iphlpapi
GetIpForwardTable
IcmpCreateFile
Icmp6CreateFile
IcmpSendEcho2Ex
Icmp6SendEcho2
IcmpCloseHandle
GetIpErrorString
user32
CharToOemBuffA
ntdll
RtlIpv4StringToAddressA
ws2_32
freeaddrinfo
gethostbyaddr
inet_ntoa
WSACleanup
WSAStartup
getnameinfo
getaddrinfo
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nwigemb Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE