dvdplay.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5c357eb981fb41f60710bf1c17d560fc_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5c357eb981fb41f60710bf1c17d560fc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5c357eb981fb41f60710bf1c17d560fc_JaffaCakes118
-
Size
14KB
-
MD5
5c357eb981fb41f60710bf1c17d560fc
-
SHA1
694f41207d2e0d96c83b8d1659b2a51d039b6eed
-
SHA256
c29df717d46f5b040773a4a907301ce08322b917a363daa05e94cf8b42e22b56
-
SHA512
399ffabb61963c5b0158c7c08a38df35ac37b8fc43db8b23cf83960a305671984b8d324e85bcf12f9bb11187d3096580a0590712756f33e7766046c807b79bb8
-
SSDEEP
384:qXMuiNGjXE1WoCLZWbnbWjbIwr5Gr+wKqCM:qXMuicrpLr7r52KqH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c357eb981fb41f60710bf1c17d560fc_JaffaCakes118
Files
-
5c357eb981fb41f60710bf1c17d560fc_JaffaCakes118.exe windows:6 windows x86 arch:x86
2798481adbebd0d6c99ba906d155d3e6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
advapi32
RegGetValueW
kernel32
CreateProcessW
SearchPathW
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter
msvcrt
__set_app_type
?terminate@@YAXXZ
__p__fmode
_controlfp
__p__commode
_adjust_fdiv
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
memset
_except_handler4_common
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE