c:\savxp\build\symbols\Release\SDCDevCon.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4b24387e1331532136099ab13a5802f9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4b24387e1331532136099ab13a5802f9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b24387e1331532136099ab13a5802f9_JaffaCakes118
-
Size
76KB
-
MD5
4b24387e1331532136099ab13a5802f9
-
SHA1
a51e588579eab0ee5f7a104bcdee00e556908cd5
-
SHA256
46727bf91a9d621fd333055892729fdb8d7dce02c1e209a00f03e612c0a5b9fd
-
SHA512
92da7d1b96fda29dfa4248f808bfb798b9f83c2f2e6ed97601df59649135a88e3475a87904f794743ae4b9ee579db2e68081af10ef8d1057cee30137b808c1eb
-
SSDEEP
1536:p98h8Gip6XHiJe6LbOQY+jmZ3K8R9o3A74IgAFZCtu9C:4h8GH2LbOQYMYR9OA74IgAF0tu9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b24387e1331532136099ab13a5802f9_JaffaCakes118
Files
-
4b24387e1331532136099ab13a5802f9_JaffaCakes118.exe windows:4 windows x86 arch:x86
2e0a76399dab76873d8052082682c986
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
setupapi
SetupDiSetClassInstallParamsW
SetupDiEnumDeviceInfo
SetupDiCreateDeviceInfoListExW
SetupDiCallClassInstaller
SetupDiOpenDeviceInfoW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstallParamsW
kernel32
FreeEnvironmentStringsA
HeapSize
RtlUnwind
HeapReAlloc
GetLastError
GetCommandLineW
VirtualAlloc
InitializeCriticalSection
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
Sleep
GetLocaleInfoA
LoadLibraryA
shell32
CommandLineToArgvW
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jzkpipn Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE