C:\data\code\digicertutil\UtilApps\Release\DigiCertUtil.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5b682e9985aa167a39ee7103a338d2ab_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5b682e9985aa167a39ee7103a338d2ab_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5b682e9985aa167a39ee7103a338d2ab_JaffaCakes118
-
Size
3.0MB
-
MD5
5b682e9985aa167a39ee7103a338d2ab
-
SHA1
4c4c728921881cbd654f0b08555327ce7bfd81ef
-
SHA256
0d3ceba4db6c12f14c51387cbfffed8884b9316845cb59800f9340317b070622
-
SHA512
c7971a1e3d9006b04aedd93bc37fc058165a06f5b0cd0384ce03ad5f4f9036b8b277a882a6f2c63c38fe2aacdbc6843a81b8a66aa573ea515bdc922d1536a8ac
-
SSDEEP
49152:qw404jzMn3w8ekk4h+lWE1jSgaB0nGWAaL/HFD3WEUaIMmtSK5Zawb/Ml5oPk:qw4RmwWk4ElWE1jSga0ncaL/lzzUFMmq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b682e9985aa167a39ee7103a338d2ab_JaffaCakes118
Files
-
5b682e9985aa167a39ee7103a338d2ab_JaffaCakes118.exe windows:5 windows x86 arch:x86
44a92ee90396cb398b64ad0cad77702f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
Sleep
WideCharToMultiByte
SizeofResource
LockResource
LoadResource
FindResourceW
CompareFileTime
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
FileTimeToLocalFileTime
FileTimeToSystemTime
MultiByteToWideChar
GetTickCount
GetLastError
FindResourceA
CreateFileA
CloseHandle
SystemTimeToFileTime
GetCurrentThreadId
GetModuleHandleA
WaitForSingleObject
TerminateThread
GetModuleFileNameA
GetVersionExA
LoadLibraryA
GetProcAddress
FreeLibrary
InterlockedIncrement
OutputDebugStringA
AllocConsole
GetConsoleScreenBufferInfo
GetStdHandle
SetConsoleScreenBufferSize
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetFileSize
SetFilePointer
ReadFile
WriteFile
GetCurrentProcess
ResumeThread
InterlockedDecrement
GetCurrentDirectoryA
HeapReAlloc
HeapAlloc
HeapFree
GetProcessHeap
RaiseException
HeapSize
DecodePointer
LoadLibraryExA
SetFilePointerEx
ReleaseSemaphore
CreateSemaphoreA
SuspendThread
MulDiv
GetSystemTimeAsFileTime
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
SetEndOfFile
InitializeCriticalSection
CreateFileMappingA
MapViewOfFile
CreateMutexA
OpenSemaphoreA
UnmapViewOfFile
ReleaseMutex
GetSystemInfo
DeleteFileA
RemoveDirectoryA
GetTempPathA
CreateDirectoryA
GlobalSize
LocalFree
FormatMessageA
CopyFileA
SetLastError
FreeResource
GetModuleFileNameW
GetModuleHandleW
LoadLibraryW
GetCurrentProcessId
EncodePointer
GetSystemDirectoryW
LoadLibraryExW
GlobalDeleteAtom
lstrcmpW
GlobalAddAtomA
GlobalFindAtomA
GlobalGetAtomNameA
CompareStringA
FindClose
FindFirstFileA
FlushFileBuffers
GetFullPathNameA
LockFile
UnlockFile
DuplicateHandle
lstrcmpiA
GetVolumeInformationA
lstrcmpA
SetEvent
CreateEventA
SetThreadPriority
VirtualProtect
GetCurrentThread
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
FindNextFileA
VerSetConditionMask
lstrcpyA
VerifyVersionInfoA
GlobalReAlloc
GlobalHandle
LocalAlloc
LocalReAlloc
GetACP
GlobalFlags
CompareStringW
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetOEMCP
GetCPInfo
GetFileAttributesA
GetFileAttributesExA
GetFileSizeEx
GetFileTime
SetErrorMode
FindResourceExW
GetTempFileNameA
GetWindowsDirectoryA
SearchPathA
GetProfileIntA
GetUserDefaultLCID
IsDebuggerPresent
IsProcessorFeaturePresent
SetStdHandle
GetFileType
GetCommandLineA
RtlUnwind
VirtualAlloc
VirtualQuery
CreateThread
ExitThread
ExitProcess
GetModuleHandleExW
HeapQueryInformation
IsValidCodePage
GetStringTypeW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
GetTimeZoneInformation
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetDriveTypeW
GetConsoleCP
GetConsoleMode
ReadConsoleW
GetDateFormatW
GetTimeFormatW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
OutputDebugStringW
GetCurrentDirectoryW
WriteConsoleW
CreateFileW
SetEnvironmentVariableA
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 432KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 13B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 633KB - Virtual size: 632KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 155KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ