C:\3hbksa\4d6r6.pdb
Static task
static1
Behavioral task
behavioral1
Sample
76952856b0755eca90d9c100c940a597_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
76952856b0755eca90d9c100c940a597_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
76952856b0755eca90d9c100c940a597_JaffaCakes118
-
Size
166KB
-
MD5
76952856b0755eca90d9c100c940a597
-
SHA1
e705f06e1122b7f427de94095a4ec42fd30840c8
-
SHA256
a6c1e1d4fc34d785c0f1dd5d76fea560fecd4378bdec684fa7fbfac2b46f0a17
-
SHA512
5b0e52f611dd99ac0e29d7b10ae26a5afeb241112640c789f06910dbafaac98da719a98c19bb1f0504482f30c4b64d5033aa9735a583cdbe55ed4d9ad3d156d4
-
SSDEEP
3072:IqXIBXj8K4xGt6wVHJi/+yhJ2x5xX/WVvPojigaIOp6pZUQ:qBYK4aV6+9PIvgji/IA6t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76952856b0755eca90d9c100c940a597_JaffaCakes118
Files
-
76952856b0755eca90d9c100c940a597_JaffaCakes118.exe windows:5 windows x86 arch:x86
61efc273154b2320624031a6eab30713
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ws2_32
recvfrom
sendto
gethostname
kernel32
TlsSetValue
CompareStringW
CompareStringA
GetTimeZoneInformation
LoadLibraryA
GetModuleHandleA
GetTickCount
FlushFileBuffers
CloseHandle
CreateFileA
GetLastError
HeapFree
GetCommandLineA
GetStartupInfoA
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
HeapAlloc
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
SetEnvironmentVariableA
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapSize
GetLocaleInfoW
user32
wvsprintfA
wsprintfA
Sections
.text Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ