d:\mmut\mutator8.3\tmp\f1df1949424dca5d0643be251c1d9841\installator1.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3e9e084cd0fe44559e39e6e1752e6ce9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3e9e084cd0fe44559e39e6e1752e6ce9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3e9e084cd0fe44559e39e6e1752e6ce9_JaffaCakes118
-
Size
350KB
-
MD5
3e9e084cd0fe44559e39e6e1752e6ce9
-
SHA1
1cfe245d85a38bd81a389ce4c399cdaa289d1717
-
SHA256
825c10dc31c7212dc00f52c3738d06e377c787d260abd60246787aaee8d5b7a8
-
SHA512
42ff83eca05b9788ee3e60f0c6aa46658d06aea72f02c34083fbf2b36885810b3eae24d96b4c8937cef5989641a1314ec6562cb7b2e66b829483e39408664c40
-
SSDEEP
6144:WClSYFIgRMqAk+SWfDWSjI74r4EXBcSgeP1iDT2IVD/zQnPLWpcwb:NlSYFbRMqAk+SWfDWSjI7EvXBcYP1gW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e9e084cd0fe44559e39e6e1752e6ce9_JaffaCakes118
Files
-
3e9e084cd0fe44559e39e6e1752e6ce9_JaffaCakes118.exe windows:5 windows x86 arch:x86
f87e8f6405196c82c73e711a1396c8fe
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
GetWindow
advapi32
RegEnumValueA
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
LookupAccountSidA
GetTokenInformation
OpenProcessToken
ws2_32
WSAStartup
WSACleanup
wininet
InternetOpenUrlA
InternetCloseHandle
InternetOpenA
InternetReadFile
HttpQueryInfoA
netapi32
NetUserGetInfo
NetApiBufferFree
kernel32
RtlUnwind
CompareStringW
CompareStringA
GetProcessHeap
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
HeapReAlloc
VirtualAlloc
GetLocaleInfoA
GetCompressedFileSizeA
GetCommandLineA
CloseHandle
UnlockFile
WriteFile
LockFile
SetFilePointer
ReadFile
CreateFileA
GetLogicalDriveStringsA
CreateMutexA
ExitProcess
OpenMutexA
Sleep
CreateProcessA
CopyFileA
GetModuleFileNameA
GetEnvironmentVariableA
GetShortPathNameA
GetCurrentProcess
MultiByteToWideChar
SetEnvironmentVariableA
CreateThread
SetFileAttributesA
GetLastError
CreateDirectoryA
GetLocalTime
GetVolumeInformationA
GetDriveTypeA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
FindNextFileA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
GetSystemTimeAsFileTime
WideCharToMultiByte
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
GetProcAddress
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
TerminateProcess
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
HeapFree
GetStdHandle
SetStdHandle
GetFileType
GetConsoleCP
GetConsoleMode
SetHandleCount
HeapAlloc
FlushFileBuffers
GetFullPathNameA
GetCurrentDirectoryA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RaiseException
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 245KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE