appidcertstorecheck.pdb
Behavioral task
behavioral1
Sample
3f36015ede31b5753f77418e013837b2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3f36015ede31b5753f77418e013837b2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3f36015ede31b5753f77418e013837b2_JaffaCakes118
-
Size
124KB
-
MD5
3f36015ede31b5753f77418e013837b2
-
SHA1
eafd07f25f0465caa4c03a5752d01bc9f6cc32a8
-
SHA256
2cf57e6ccb1f670614521ba2ba204ab4c3c1ab9a4b6fe11f938fb468f45e3f52
-
SHA512
004c75ed81274f2c46b78bf7c76e5a2797469c055e19394b6f0c489507bda65ae7ef8260a16c73fc22f88bded26079e32be92148c66ec8f691169eeb60abf56c
-
SSDEEP
3072:YCjaKLKrMF5ocRUBtPKB7dzPXIKck+KVGJjX6WUKSmQ/Talu+JBH:Y9AFkBtPKldzPYKLGJbztDuG4YBH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f36015ede31b5753f77418e013837b2_JaffaCakes118
Files
-
3f36015ede31b5753f77418e013837b2_JaffaCakes118.exe windows:6 windows x86 arch:x86
7551f21ff0790ea2fb43e1409988009b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
exit
_XcptFilter
?terminate@@YAXXZ
memset
_cexit
_except_handler4_common
_controlfp
_exit
__wgetmainargs
ntdll
EtwEventRegister
EtwEventWrite
EtwEventUnregister
EtwUnregisterTraceGuids
EtwRegisterTraceGuidsW
EtwGetTraceLoggerHandle
EtwGetTraceEnableLevel
EtwGetTraceEnableFlags
EtwTraceMessage
user32
GetSystemMetrics
kernel32
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
Sleep
InterlockedExchange
UnhandledExceptionFilter
InterlockedCompareExchange
FreeLibrary
GetProcAddress
DelayLoadFailureHook
CreateBoundaryDescriptorW
AddSIDToBoundaryDescriptor
CreatePrivateNamespaceW
OpenPrivateNamespaceW
DeleteBoundaryDescriptor
DeviceIoControl
LoadLibraryExA
HeapSetInformation
CreateMutexExW
LocalFree
GetLastError
LocalAlloc
CompareFileTime
GetSystemTimeAsFileTime
CloseHandle
CreateFileW
ClosePrivateNamespace
ReleaseMutex
WaitForSingleObject
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.UPX0 Size: 108KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE