C:\Obnubilate\Temp\cj3uoa0lt2eq311jc9dm4fcec5\Stub.pdb
Static task
static1
Behavioral task
behavioral1
Sample
7212920d980df8256c78b68eac06b74e_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
7212920d980df8256c78b68eac06b74e_JaffaCakes118
-
Size
852KB
-
MD5
7212920d980df8256c78b68eac06b74e
-
SHA1
14feb2c19db495ac86c8cba9022e2744bd15f38d
-
SHA256
9fae250feb1a57606338aa826dca5ac6bda2cf9eca831f34c28455164b7489d5
-
SHA512
d37cac209150c1a9f23b2a8df7ff9fab8c58a1187bef7f09b4707675842eb399f2ae3c3053eecf629b3f334514f4b1b294636e505e2647d42ab1cb8f50e3bc3b
-
SSDEEP
24576:v/PZZioY44MDS7VRkvIENCYWW2dM9/5Aj:v/PSof4pXkDD2Oh5Aj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7212920d980df8256c78b68eac06b74e_JaffaCakes118
Files
-
7212920d980df8256c78b68eac06b74e_JaffaCakes118.exe windows:4 windows x86 arch:x86
77361ab48f4977367b012257f6428d93
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetThreadContext
WaitForSingleObject
GetCurrentThread
GetCommandLineA
GlobalAlloc
GetProcAddress
GlobalFree
LoadLibraryA
GetModuleHandleA
CreateThread
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
RaiseException
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
Sleep
HeapSize
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
InitializeCriticalSection
RtlUnwind
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CreateFileA
CloseHandle
FlushFileBuffers
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 784KB - Virtual size: 780KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ