c:\Users\user1\Documents\Visual Studio 2005\Projects\Andy\antispy_2007_08_30\antispy_2007_08_30\bin\WinAntivirus.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2c539a350235f6f0511eb3ead0de667a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2c539a350235f6f0511eb3ead0de667a_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2c539a350235f6f0511eb3ead0de667a_JaffaCakes118
-
Size
3.9MB
-
MD5
2c539a350235f6f0511eb3ead0de667a
-
SHA1
6f34a6baef63ff9b3b104976ad08cc11257a1b45
-
SHA256
44f3371fc4770d29b6d753fd2926142826ba249eb4516ad01b660afb300bd85e
-
SHA512
dd446e4af3ca3a62b72887b9130417518ecd83e52a33efb2b024f7c2e463fa933bb7e9992c8f0ac1cd4ee7ca5364d7c3afbdc889480adeda318c6ff5d5beb3fa
-
SSDEEP
49152:xPd4XZ73+vHp6oiVURCUH8t3Kgw1lNcb1fhI1aAwM8Xr3EFIVfVfhtZAZik:xPd4J7346Vk8tTclN+kgTd0FMVfhzAl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c539a350235f6f0511eb3ead0de667a_JaffaCakes118
Files
-
2c539a350235f6f0511eb3ead0de667a_JaffaCakes118.exe windows:4 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: 772KB - Virtual size: 772KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
t5o4pdf2 Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
j51pey.7 Size: 704KB - Virtual size: 704KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ncfkwaj Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
arj2ot4e Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ