savedump.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3c0b4383caa76bc12179e72d7950e19a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3c0b4383caa76bc12179e72d7950e19a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3c0b4383caa76bc12179e72d7950e19a_JaffaCakes118
-
Size
13KB
-
MD5
3c0b4383caa76bc12179e72d7950e19a
-
SHA1
120f875b73a3e0f2518ee36a4415fed344af7ba7
-
SHA256
d54ab06e8ec4aefdcb364a00ee8cbffe1d8f9275610a6d4a77fa2f706654e6d6
-
SHA512
e8380fc1b93f118caa6e6df32d7c00ad3c16a5ad7451671ee0ab7af630a18fe796215d7f5864c2dbe943b6d9987e30bb5716ee7d918f333cd6bb74c61a77186b
-
SSDEEP
384:9RfnLXxhtftT7P3Fvg3XD3Hk8BR0KJSWq68dQW:9RfnLBhVtVvSkwRyHd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c0b4383caa76bc12179e72d7950e19a_JaffaCakes118
Files
-
3c0b4383caa76bc12179e72d7950e19a_JaffaCakes118.exe windows:5 windows x86 arch:x86
555ba4b7cb43bc82798b5b09095943a5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
_cexit
_exit
_c_exit
exit
_iob
fprintf
sprintf
wcscpy
free
malloc
wcscat
_XcptFilter
wcslen
swprintf
advapi32
OpenThreadToken
OpenProcessToken
GetTokenInformation
RegisterEventSourceW
ReportEventW
RegOpenKeyW
RegQueryValueExW
RegDeleteValueW
RegCloseKey
RegSetValueExW
kernel32
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetPriorityClass
SetThreadPriority
CopyFileExW
UnhandledExceptionFilter
GetCurrentThread
GetCurrentProcess
ReadFile
GetComputerNameW
Sleep
GetWindowsDirectoryW
LoadLibraryExW
GetProcAddress
FreeLibrary
SetUnhandledExceptionFilter
GetModuleHandleA
GetLocalTime
CreateDirectoryW
ExpandEnvironmentStringsW
CloseHandle
CreateFileW
DeleteFileW
WideCharToMultiByte
GetLastError
GetFileAttributesW
ntdll
RtlCreateSecurityDescriptor
RtlAllocateAndInitializeSid
RtlAddAccessAllowedAce
RtlSetDaclSecurityDescriptor
RtlSetOwnerSecurityDescriptor
NtSetSecurityObject
RtlFreeSid
RtlInitAnsiString
RtlAnsiStringToUnicodeString
RtlCreateAcl
netapi32
NetAlertRaiseEx
dbgeng
DebugCreate
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 84B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.uro Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE