D:\Documents and Settings\Admin\Рабочий стол\Projects\ld\Release\ld.pdb
Static task
static1
Behavioral task
behavioral1
Sample
70ca299a95d8005ea51b5ebcf4e2c419_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
70ca299a95d8005ea51b5ebcf4e2c419_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
70ca299a95d8005ea51b5ebcf4e2c419_JaffaCakes118
-
Size
7KB
-
MD5
70ca299a95d8005ea51b5ebcf4e2c419
-
SHA1
8d8a0232e21b43df2afe92f273b1e9a1b301fbfe
-
SHA256
85b95f65c4d00b7e10527affdc52e7ef75cad52657aed08a95aa0b60007e7ca3
-
SHA512
85ae923bca07c028ba732c5348f8686d262236a2345e1434fe2cbb651137fddbf4328587c231733e7ef755a3b09f41e43e77b89b47762ec89d0f987048056737
-
SSDEEP
96:c8IPhyAjDKrK2GdLDu4AD4WGnwYzruVABG60DCtEyeUt:ZchQYAD4PzruVQG60aEp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70ca299a95d8005ea51b5ebcf4e2c419_JaffaCakes118
Files
-
70ca299a95d8005ea51b5ebcf4e2c419_JaffaCakes118.exe windows:5 windows x86 arch:x86
73275bf727eb75cb68d7162bc7db36a9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shell32
ShellExecuteW
urlmon
URLDownloadToFileW
msvcr100
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_fmode
__dllonexit
_lock
_onexit
_except_handler4_common
_invoke_watson
_controlfp_s
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__winitenv
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
_unlock
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
DecodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
EncodePointer
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
GetTickCount
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 414B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ