ping.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2a09b275b66da75135923378fe29733e_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2a09b275b66da75135923378fe29733e_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a09b275b66da75135923378fe29733e_JaffaCakes118
-
Size
42KB
-
MD5
2a09b275b66da75135923378fe29733e
-
SHA1
4543cac2d087adcce874e99b65095a2c16883fdb
-
SHA256
3b42c73168534b7c3cd595270485f413a1be00186f722ad720ceab923ac27a88
-
SHA512
868debeaa50e2f4cc0378af809374d8698e42ade1540450419b80c5ba5c893d0851fe0504467c56c20dff57e30da6f910b84f823644570e271b9b4e4ac4155eb
-
SSDEEP
768:xlWE0F7glq81jIl9tgHdRYpf/JRLvw5hj+l0:xlf0F7nCCSHLYhzw30
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a09b275b66da75135923378fe29733e_JaffaCakes118
Files
-
2a09b275b66da75135923378fe29733e_JaffaCakes118.exe windows:6 windows x86 arch:x86
608debbdfbeac87355579c189f9bdfc5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
kernel32
InterlockedCompareExchange
FormatMessageA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedExchange
LocalFree
Sleep
SetConsoleCtrlHandler
LocalAlloc
GetLastError
HeapSetInformation
SetThreadUILanguage
msvcrt
__p__commode
__setusermatherr
_amsg_exit
_initterm
_XcptFilter
_exit
__p__fmode
__getmainargs
memset
isspace
exit
strtoul
__set_app_type
memcpy
?terminate@@YAXXZ
_except_handler4_common
_controlfp
_cexit
_write
_setmode
iphlpapi
GetIpForwardTable
IcmpCreateFile
Icmp6CreateFile
IcmpSendEcho2Ex
Icmp6SendEcho2
IcmpCloseHandle
GetIpErrorString
user32
CharToOemBuffA
ntdll
RtlIpv4StringToAddressA
ws2_32
freeaddrinfo
gethostbyaddr
inet_ntoa
WSACleanup
WSAStartup
getnameinfo
getaddrinfo
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yytbcuf Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE