c:\debug\app.pdb
Static task
static1
Behavioral task
behavioral1
Sample
49d73e305b70417f75fa85ebb9502901_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
49d73e305b70417f75fa85ebb9502901_JaffaCakes118
-
Size
208KB
-
MD5
49d73e305b70417f75fa85ebb9502901
-
SHA1
2ab5a31629f2e7f72d4618735a875a5076e8ae49
-
SHA256
be159381fdc51df9561fd8c882e21cfa8f3aa2b9a40001c9ef2156dc8c5b865b
-
SHA512
beeddc3fd223a1bfa13919ad5f87b17189cac0decd0fbaf710d96e50b800510d23eacf97e6c32eb61100338b6ca56d41a361c1998f9c4d0e43a0e3a64d3993fd
-
SSDEEP
3072:C+zKRrdYrl/+h3YekJpk5mvSYQMfz5OgtlyIju42:/yryIhIDkUz57yEv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49d73e305b70417f75fa85ebb9502901_JaffaCakes118
Files
-
49d73e305b70417f75fa85ebb9502901_JaffaCakes118.exe windows:4 windows x86 arch:x86
40c867710cba509a24e9172dd875deb4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
VirtualAlloc
LoadLibraryA
VirtualProtect
GetProcAddress
GetModuleHandleA
GlobalFree
ReleaseSemaphore
Sleep
VirtualFree
GetLastError
SetStdHandle
SetFilePointer
GetLocaleInfoA
HeapSize
RaiseException
LCMapStringW
LCMapStringA
VirtualLock
CloseHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
MultiByteToWideChar
HeapAlloc
GetSystemInfo
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
RtlUnwind
InterlockedExchange
GetStringTypeA
GetStringTypeW
ReadFile
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
FlushFileBuffers
user32
GetWindow
IsWindowEnabled
InSendMessage
ShowWindow
FindWindowA
MoveWindow
gdi32
PatBlt
ws2_32
WSAStartup
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 156KB - Virtual size: 158KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ