iedw.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4d68a7a39b8d15e14e03e6fa90c7adea_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
4d68a7a39b8d15e14e03e6fa90c7adea_JaffaCakes118
-
Size
167KB
-
MD5
4d68a7a39b8d15e14e03e6fa90c7adea
-
SHA1
743b8ee2315f87fe86aa551c7cd96e08f085c0d6
-
SHA256
2f373f2f9354b7634239d67b9d6eadacc677b449049f0a9dd6c944a8c2223650
-
SHA512
2b82da3a32c07990d3eb16c637508a9be94ea6e7e2f1bae23d8b446ef333e9862850e2f12c7c647771efe6b0cff7edbdb27920737a7bde6cf0e4be3a126acaeb
-
SSDEEP
1536:bNpbWTono2PF9yJH9KBjH7ZoSQoL+Qz6AdvaLj30b9KVv6q7pbhD3fdaAsU3wNBK:qdKFOoL16Ady330wN6qb3MAxwgKuV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d68a7a39b8d15e14e03e6fa90c7adea_JaffaCakes118
Files
-
4d68a7a39b8d15e14e03e6fa90c7adea_JaffaCakes118.exe windows:6 windows x86 arch:x86
3959c5d315644154f491048fbe913a3e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
CreateFileMappingW
InitializeCriticalSection
HeapSetInformation
SetUnhandledExceptionFilter
GetCommandLineW
MapViewOfFile
CreateFileW
GlobalFree
OpenProcess
DeleteCriticalSection
SetLastError
CreateProcessW
SearchPathW
FindResourceW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
LoadLibraryExW
GetLastError
LoadResource
GetSystemWindowsDirectoryW
DeactivateActCtx
ActivateActCtx
ReleaseActCtx
CreateActCtxW
OpenEventW
CreateEventW
LoadLibraryW
GetProcAddress
FreeLibrary
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
GetModuleHandleA
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
CloseHandle
GetModuleHandleW
UnmapViewOfFile
GetTempPathW
GetTickCount
GetTempFileNameW
SetEvent
GetVersionExW
FindResourceExW
GetModuleFileNameW
gdi32
SetTextColor
GetObjectW
CreateFontIndirectW
SetBkMode
CreatePen
SelectObject
Polyline
DeleteObject
user32
GetAncestor
EndDialog
ShowWindow
GetParent
SendMessageW
PostQuitMessage
PeekMessageW
DispatchMessageW
TranslateMessage
MsgWaitForMultipleObjects
SetWindowLongW
DialogBoxParamW
PostMessageW
MessageBoxW
SendDlgItemMessageW
LoadIconW
LoadImageW
SetDlgItemTextW
GetSysColor
SetWindowPos
GetDlgItem
EnableWindow
LoadStringW
SetWindowTextW
GetSysColorBrush
FillRect
DrawIconEx
GetWindowLongW
msvcrt
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_amsg_exit
__setusermatherr
_adjust_fdiv
__p__commode
??_U@YAPAXI@Z
__set_app_type
memcpy
_controlfp
??2@YAPAXI@Z
??_V@YAXPAX@Z
??3@YAXPAX@Z
memset
_vsnwprintf
_wcsnicmp
_wcsicmp
__p__fmode
bsearch
ntdll
RtlUnwind
shlwapi
ord437
SHStrDupW
ord219
PathFindFileNameW
PathRemoveFileSpecW
PathAppendW
PathQuoteSpacesW
StrCmpW
ord158
StrToIntW
ord172
shell32
ord28
ord16
ExtractIconExW
CommandLineToArgvW
SHCreateShellItem
SHGetDesktopFolder
ord152
ord17
dbghelp
MiniDumpReadDumpStream
MiniDumpWriteDump
oleaut32
SysStringLen
SysFreeString
SysAllocString
SysAllocStringLen
ole32
CreateBindCtx
CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
shdocvw
ord159
iertutil
ord32
sfc
SfcIsFileProtected
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
Sections
.text Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE