extrac32.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2bcc6d8ae6dac361d72ede25a3844887_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2bcc6d8ae6dac361d72ede25a3844887_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2bcc6d8ae6dac361d72ede25a3844887_JaffaCakes118
-
Size
79KB
-
MD5
2bcc6d8ae6dac361d72ede25a3844887
-
SHA1
a135e1cd2ef669ba42e261d75fd197b200a830e5
-
SHA256
bcfc1a09595ce97ca4c9ff8d238f21ad140144511b369cd46703473fcb4fe0fe
-
SHA512
662c1f4a31efe229e5537efe319b63cb8f06a7463dd7eb8b8c9b9124133b5711b4a75222820fcf4b1fb389860eadaca84e973a488054d1984e7a6624679baf3c
-
SSDEEP
1536:3+3Le8Ijge2GKEivuGWh3I5iLMfOuvHW+sgNz8GVoUh3vUn6uG:3+be8IjfUWh45iLMWuv2+sinsn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bcc6d8ae6dac361d72ede25a3844887_JaffaCakes118
Files
-
2bcc6d8ae6dac361d72ede25a3844887_JaffaCakes118.exe windows:6 windows x86 arch:x86
a00d4ea0a0ed44665938b1e0a9771930
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetCurrentProcessId
FileTimeToDosDateTime
FileTimeToLocalFileTime
GetFileAttributesExA
SetFileAttributesA
CloseHandle
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
Sleep
CreateFileA
GetVersion
GetProcAddress
GetModuleHandleW
GetLastError
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
RtlUnwind
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
GetModuleFileNameA
GetDriveTypeA
UnhandledExceptionFilter
user32
CharNextExA
DispatchMessageA
PeekMessageA
SendDlgItemMessageA
EnableMenuItem
GetSystemMenu
CreateDialogParamA
DestroyWindow
MessageBoxA
msvcrt
_errno
_mkdir
_write
_read
_eof
_tempnam
strpbrk
strspn
memcpy
atoi
isdigit
_chmod
strchr
_lseek
_chsize
tolower
getenv
_filelength
_stricmp
fgets
_iob
strncmp
exit
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
_acmdln
__doserrno
_amsg_exit
__setusermatherr
__p__commode
__p__fmode
__set_app_type
memset
?terminate@@YAXXZ
_controlfp
_vsnprintf
malloc
_strdup
free
_open
printf
_close
_unlink
isalpha
_getdrive
toupper
_stat
_initterm
comctl32
ord17
Sections
.text Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 29KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE