d:\Projects\WinRAR\rar\build\sfxcon32\Release\sfxcon.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4df8df8daf4759774f508f829bfbf3eb_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4df8df8daf4759774f508f829bfbf3eb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4df8df8daf4759774f508f829bfbf3eb_JaffaCakes118
-
Size
171KB
-
MD5
4df8df8daf4759774f508f829bfbf3eb
-
SHA1
a0e83bfe29cbc2956f10c3c89df4973c29096902
-
SHA256
2566d8d9c085d05ff403d8c8bebce9149fb388ac25209df48da35edfa964061e
-
SHA512
6863077a473aa8e7a4f39d4ec3bd9f8ce1148a3dd3ea8cc07b57cb432d0a0bcbbe16827226d6de0b32f812e3f75b7d9019aa5a2b028c5f4fb2ccf5a53f101f10
-
SSDEEP
3072:D/tz0R7yhf7T/DctQffZfffPffWfff7fff6fdff7hbDePaX+J5OtRgy:DkuhzT/DcQffZfffPffWfff7fff6fdfD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4df8df8daf4759774f508f829bfbf3eb_JaffaCakes118
Files
-
4df8df8daf4759774f508f829bfbf3eb_JaffaCakes118.exe windows:5 windows x86 arch:x86
f5bccbbf7f1a1d6e89398844e9ddb93c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetLastError
GetCurrentProcess
SetFileTime
MoveFileA
SetFilePointer
SetEndOfFile
GetFileType
CreateFileA
CreateFileW
ReadFile
WriteFile
GetDriveTypeA
GetFileAttributesA
GetFileAttributesW
SetFileAttributesA
SetFileAttributesW
DeleteFileA
DeleteFileW
CreateDirectoryA
CreateDirectoryW
CloseHandle
FindNextFileA
FindFirstFileA
FindNextFileW
FindFirstFileW
GetVersionExA
GetCommandLineA
SetErrorMode
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
CompareStringA
ExitProcess
LocalFileTimeToFileTime
SystemTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetSystemTime
WideCharToMultiByte
MultiByteToWideChar
IsDBCSLeadByte
GetCPInfo
Sleep
GetStdHandle
GetConsoleMode
SetConsoleMode
FindClose
ReadConsoleA
user32
CharToOemBuffA
CharUpperA
wvsprintfA
OemToCharA
CharToOemA
OemToCharBuffA
LoadStringA
advapi32
LookupPrivilegeValueA
OpenProcessToken
SetFileSecurityA
SetFileSecurityW
AdjustTokenPrivileges
Sections
.text Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ