pdb.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5e79ad67fead2fd0734801b0cb196026_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5e79ad67fead2fd0734801b0cb196026_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5e79ad67fead2fd0734801b0cb196026_JaffaCakes118
-
Size
58KB
-
MD5
5e79ad67fead2fd0734801b0cb196026
-
SHA1
c76370c3e6c1b1db50d543c98818a07793ac15b6
-
SHA256
e4dee79954c0ccb0c6541b6353d99b95ffd3266d9bdffb6eadc9de50f235b966
-
SHA512
01a8435c5e623736b8e297e1c0d2b8f25b22c3343ad77823ae9a025e0eab0ad85c665855f683703cc098d93d128ddafc0ee65e21b1a3e864390f8e252b06a9cb
-
SSDEEP
768:JCCV+3rfW2TmcNc/l0jlsDBJX7ASGlJlk3FhRIos0yUyBU3BUvyTOLnrB:J+5nql0uDXMnwVLI7UyUxUqTMnrB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e79ad67fead2fd0734801b0cb196026_JaffaCakes118
Files
-
5e79ad67fead2fd0734801b0cb196026_JaffaCakes118.exe windows:4 windows x86 arch:x86
13d7560eb27c7d7a6fd3e356710688bc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
OpenProcess
GetCurrentProcessId
lstrcmpA
MulDiv
LocalFree
Sleep
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
TerminateThread
WaitForSingleObject
CreateThread
CloseHandle
GetLocaleInfoA
LeaveCriticalSection
EnterCriticalSection
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
HeapAlloc
GetProcessHeap
HeapFree
EnumCalendarInfoExA
GetCommProperties
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 410B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ