c:\Work\Alex\Applet Game from Body\Release\game.pdb
Static task
static1
Behavioral task
behavioral1
Sample
39efd232bcf49a38db557af3118163b1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
39efd232bcf49a38db557af3118163b1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
39efd232bcf49a38db557af3118163b1_JaffaCakes118
-
Size
2.7MB
-
MD5
39efd232bcf49a38db557af3118163b1
-
SHA1
e45e9029788c939208e2a8dc5f3ba1aa1845289d
-
SHA256
82453a7ede3c73cb0e5724a2a919c50842be6d1076a28aacad4739f738a09a0b
-
SHA512
6e0933fbaa51537aaee47aa30ad36c034da6f3342a5a5fef5ab53198ad857c35dba0ec0d5f693a45fddbef3ae7abff8006ed2f17fdb1d55baced45f128bd895d
-
SSDEEP
49152:eE/iMAZs7s3cRS0w26cHMaMrg1fT0KyKcnvzWDR6FIsEqUvY:rRrs3ISL26cH6rq7TcnqDUFI7qUY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39efd232bcf49a38db557af3118163b1_JaffaCakes118
Files
-
39efd232bcf49a38db557af3118163b1_JaffaCakes118.exe windows:4 windows x86 arch:x86
edd2f81a5fcdf0a6f692ab63804c96d4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GlobalReAlloc
GetTempPathA
GlobalAlloc
CreateProcessA
GlobalFree
lstrlenA
CloseHandle
WriteFile
GetFileType
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
ExitProcess
DeleteFileA
GetExitCodeProcess
Sleep
lstrcmpA
GetCommandLineA
GetVersionExA
ReadFile
SetFilePointer
GetFileSize
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
GetSystemInfo
VirtualProtect
HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
HeapReAlloc
GetStartupInfoA
TlsAlloc
SetLastError
GetCurrentThreadId
GetLastError
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
InitializeCriticalSection
VirtualAlloc
user32
wsprintfA
shell32
ShellExecuteExA
ole32
CoInitialize
CoCreateInstance
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ