E_S40MT7.pdb
Static task
static1
Behavioral task
behavioral1
Sample
730c0001a2adcdfa9093605e823bb739_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
730c0001a2adcdfa9093605e823bb739_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
730c0001a2adcdfa9093605e823bb739_JaffaCakes118
-
Size
202KB
-
MD5
730c0001a2adcdfa9093605e823bb739
-
SHA1
2157e39075667b630d2d5797a4f5cb42d7fb1a8a
-
SHA256
2557c311c90e96aead456c91986a2ddd735a41d0063f577be9fc5e85530e2227
-
SHA512
048f48c3f5029c95ba4bba86172cbd5514c7ac595bfb47599a56971fdb35e963cfeaae50f3cf343b291c3150c3ee933f4095b38128ea88e010fddb45cb883c97
-
SSDEEP
3072:Zo0UaipcPhN3d4oJVaVMgIs7xB8MpopETDLrXnq414trawPzimbCEhCrIYrv2sB0:kB8MSL4YrtzimbCBEGwWQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 730c0001a2adcdfa9093605e823bb739_JaffaCakes118
Files
-
730c0001a2adcdfa9093605e823bb739_JaffaCakes118.exe windows:6 windows x86 arch:x86
6e8a70f81d64bfe744e9efdfeef3af95
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
advapi32
RegQueryValueExW
RegCloseKey
RegSetValueExW
RegOpenKeyExW
RegDeleteValueW
RegCreateKeyExW
RegEnumKeyExW
RegDeleteKeyW
kernel32
MapViewOfFile
CreateFileMappingW
GetProcAddress
FreeLibrary
SetEvent
WaitForSingleObject
GetPrivateProfileIntW
CreateProcessW
LoadLibraryW
CreateFileW
GetVersionExW
GetTickCount
ResetEvent
CreateEventW
Sleep
CreateMutexW
lstrcmpiA
GetPrivateProfileStringA
FindFirstFileA
GetUserDefaultLangID
GetSystemDefaultLCID
GetStringTypeExW
GetPrivateProfileSectionW
GetSystemDirectoryW
GetFileSize
ReadFile
GetPrivateProfileStringW
FindFirstFileW
FindClose
LocalAlloc
DeleteFileW
GetTempFileNameW
lstrcpynW
GetLastError
GlobalAlloc
GetProfileStringW
lstrcmpiW
lstrlenW
GlobalFree
UnmapViewOfFile
CloseHandle
GetTempPathW
ReleaseMutex
GetVersionExA
GetStartupInfoW
RtlUnwind
RaiseException
ExitThread
CreateThread
SetUnhandledExceptionFilter
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThreadId
HeapDestroy
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
OutputDebugStringA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
HeapSize
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSection
GetModuleHandleW
VirtualAlloc
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
VirtualProtect
GetSystemInfo
VirtualQuery
CreateFileA
FlushFileBuffers
GetProcessHeap
lstrlenA
LocalFree
SetEndOfFile
user32
RegisterClassExW
CreateWindowExW
GetWindowLongW
DefWindowProcW
PostQuitMessage
SetWindowLongW
SetTimer
FindWindowW
SendMessageW
KillTimer
LoadStringW
GetMessageW
TranslateMessage
DispatchMessageW
ShowWindow
UpdateWindow
PostMessageW
MessageBoxW
SetWindowTextW
GetWindowTextW
IsWindow
winspool.drv
ClosePrinter
GetPrinterW
EnumJobsW
OpenPrinterW
GetPrinterDriverW
EnumPrinterDriversW
OpenPrinterA
GetPrinterDriverA
EnumPrinterDriversA
Sections
.text Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ewfgiqg Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE