D:\JXN.PDB
Static task
static1
Behavioral task
behavioral1
Sample
456c98661743955de45ddcc5d9041d57_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
456c98661743955de45ddcc5d9041d57_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
456c98661743955de45ddcc5d9041d57_JaffaCakes118
-
Size
529KB
-
MD5
456c98661743955de45ddcc5d9041d57
-
SHA1
023effa5d8ded5b66a726a4cc0fae3be5b9edafa
-
SHA256
d20f0df842d10184888385ba5c4a356adbca14693ed9479266b5e22035d6a267
-
SHA512
9dfcb561319372e8cdadfa02a702fd3a7c1ae60a1424bf12d568048bdf21ef569f231842bc0d8117b44fc6416b9769f24436329338a12629dcc0c7ad95917559
-
SSDEEP
12288:/SYfgilAYU6V5OhDas9EKAXWYMDn2mNv+T1:/ZIKLVQheCEWDbRv+J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 456c98661743955de45ddcc5d9041d57_JaffaCakes118
Files
-
456c98661743955de45ddcc5d9041d57_JaffaCakes118.exe windows:4 windows x86 arch:x86
dd422a6e8edf31c89d76e1bc52af0cd2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
DeleteEnhMetaFile
GetTextMetricsA
SetROP2
CreatePalette
DeleteDC
GetStockObject
EndPath
CreateDCA
GetROP2
GetGlyphOutlineA
ResetDCW
GetFontData
GetPaletteEntries
SetMagicColors
GetTextExtentPoint32A
CreateRectRgn
GetTextFaceW
CreateBitmapIndirect
GetDeviceCaps
SetBrushOrgEx
GdiSetBatchLimit
SetTextJustification
comdlg32
ChooseColorA
ReplaceTextA
GetOpenFileNameW
FindTextA
comctl32
CreateStatusWindow
ImageList_SetDragCursorImage
InitCommonControlsEx
_TrackMouseEvent
wininet
SetUrlCacheHeaderData
HttpAddRequestHeadersA
InternetTimeFromSystemTimeA
user32
RegisterClassExA
RegisterClassA
SetMenuItemBitmaps
ShowWindow
CreateWindowExA
SetProcessDefaultLayout
MessageBoxW
kernel32
UnhandledExceptionFilter
RtlUnwind
QueryPerformanceCounter
GetACP
GetCurrentProcessId
SetConsoleCtrlHandler
CompareStringW
GetSystemDefaultLangID
GetTimeZoneInformation
GetFileType
GetCurrentThread
WriteConsoleA
GetStringTypeW
SetStdHandle
lstrcpyA
SetLastError
FreeEnvironmentStringsA
GetCurrentThreadId
EnterCriticalSection
IsValidLocale
HeapDestroy
GetStringTypeA
SetEvent
TlsSetValue
GetEnvironmentStringsW
CloseHandle
HeapCreate
SetHandleCount
GetOEMCP
GetStartupInfoA
RemoveDirectoryA
LCMapStringW
SetUnhandledExceptionFilter
IsDebuggerPresent
SetEnvironmentVariableA
GetCPInfo
MultiByteToWideChar
VirtualProtect
VirtualFree
ExitProcess
GetProcessHeap
GetCurrentProcess
HeapAlloc
WideCharToMultiByte
GetConsoleMode
GetLocaleInfoA
SetFilePointer
LCMapStringA
GetUserDefaultLCID
GetTickCount
GetConsoleCP
EnumSystemLocalesA
GetTimeFormatA
GetStdHandle
LeaveCriticalSection
GetModuleFileNameA
GetConsoleOutputCP
HeapReAlloc
Sleep
IsValidCodePage
GetLastError
WriteFile
DeleteCriticalSection
GetVersionExA
InterlockedIncrement
GetEnvironmentStrings
LoadLibraryExW
WriteConsoleW
CreateMutexA
HeapSize
TlsGetValue
LoadLibraryA
FreeLibrary
GetModuleHandleA
ReadFile
InterlockedDecrement
FlushFileBuffers
OpenMutexA
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
GetCommandLineA
CreateFileA
TlsAlloc
TerminateProcess
GetProcAddress
VirtualAlloc
VirtualQuery
InterlockedExchange
InitializeCriticalSection
GetLocaleInfoW
TlsFree
CompareStringA
HeapFree
GetDateFormatA
Sections
.text Size: 362KB - Virtual size: 361KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ