e:\Download\test123\2424\Release\2424.pdb
Static task
static1
Behavioral task
behavioral1
Sample
65666355c89e2a35c3646e68cf88c566_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
65666355c89e2a35c3646e68cf88c566_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
65666355c89e2a35c3646e68cf88c566_JaffaCakes118
-
Size
185KB
-
MD5
65666355c89e2a35c3646e68cf88c566
-
SHA1
6820a63f83ee6f811428fe66d0e324931c2eae18
-
SHA256
59caeb7055b2a9e6a672137452ec7c9409267185c78c1cb3e0e62fc459097f9b
-
SHA512
24664801a01b32e07dbf196c9ffb5fed428ce7e77a888e0e12093fa7bfc1822f34137959efcc60ebe5004b3384344b4efa7c9973409553d55d4a3352fb834bfa
-
SSDEEP
3072:2O7YN6lW+8fQCRMZG7UeR6FdN3pfFhd40mnRNZbiHVoR+mvi+2i:h7ub+smgUmwfv4nRNZbibmL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65666355c89e2a35c3646e68cf88c566_JaffaCakes118
Files
-
65666355c89e2a35c3646e68cf88c566_JaffaCakes118.exe windows:4 windows x86 arch:x86
279f59b85bf7beef6cdc465e4cfce2c8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetTickCount
CreateFileA
ReadFile
SetFilePointer
WriteFile
CloseHandle
GetFileSize
GlobalAlloc
ExitProcess
LoadLibraryA
GetThreadContext
CreateFileW
GetModuleHandleA
VirtualAlloc
GetProcAddress
GetCommandLineA
GetModuleFileNameA
GetLastError
lstrcpyA
GetModuleFileNameW
GetSystemTime
VirtualProtect
GetLocaleInfoA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
GetStartupInfoA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
InterlockedExchange
VirtualQuery
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
SetStdHandle
HeapSize
LCMapStringA
GetSystemInfo
user32
KillTimer
GetActiveWindow
GetDC
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ