iexplore.pdb
Static task
static1
Behavioral task
behavioral1
Sample
481a4cb9bf9cd42ca55e6bc7280b8cba_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
481a4cb9bf9cd42ca55e6bc7280b8cba_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
481a4cb9bf9cd42ca55e6bc7280b8cba_JaffaCakes118
-
Size
92KB
-
MD5
481a4cb9bf9cd42ca55e6bc7280b8cba
-
SHA1
5b797870a67ed497e0faf6948b6c187f63363731
-
SHA256
93eea3d4d1ed49cf2df9fcf3a4108af530e020b472c92208b822850969e5f906
-
SHA512
e2cdcdea85dcc1b839d76ecb74eeba53a472949c96cdc18b7fc7cbc975663a63425fe81368ffdb76d6eac35ed7a05619d1855dd39d659fe0a75125d2371b7046
-
SSDEEP
1536:D0QW94GLkZP4BcDQX2oooD+AyxArAIVJ9bayZbScKEang55d:QTQZP46QXMmAIX1tanU5d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 481a4cb9bf9cd42ca55e6bc7280b8cba_JaffaCakes118
Files
-
481a4cb9bf9cd42ca55e6bc7280b8cba_JaffaCakes118.exe windows:5 windows x86 arch:x86
273e51db4ba8d47ed082931a3be3e12d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_exit
_c_exit
_except_handler3
kernel32
GetStartupInfoA
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
LocalAlloc
LocalFree
SetUnhandledExceptionFilter
CreateMutexA
OpenProcess
GetModuleFileNameW
MapViewOfFile
CreateFileMappingA
SetErrorMode
GetLastError
lstrlenW
MultiByteToWideChar
CreateEventA
GetCurrentThreadId
lstrcatA
lstrlenA
lstrcmpiA
lstrcpyA
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
UnmapViewOfFile
CloseHandle
ReleaseMutex
SetEvent
WaitForSingleObject
CreateProcessA
lstrcpynA
GetCurrentProcessId
DuplicateHandle
GetCurrentProcess
WaitForMultipleObjects
user32
GetClassNameA
DestroyMenu
ShowWindow
CreateWindowExA
CreateMenu
RegisterClassA
DefWindowProcA
LoadStringA
DispatchMessageA
wsprintfA
DestroyWindow
MsgWaitForMultipleObjects
PeekMessageA
SendMessageA
GetShellWindow
GetForegroundWindow
TranslateMessage
shlwapi
ord241
ord243
ord276
ord437
ord376
ord80
ord185
SHRegGetBoolUSValueA
PathRemoveFileSpecA
PathAppendA
PathQuoteSpacesA
StrCpyNW
wnsprintfA
SHGetValueA
PathFindFileNameA
StrStrIA
shdocvw
ord101
ord158
Exports
Exports
DllGetLCID
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE