C:\Users\Laptop\Desktop\Visual2008_Itemcheck\Release\Visual2008_Itemcheck.pdb
Static task
static1
Behavioral task
behavioral1
Sample
81fa88c615ed7c86766c907c33654d4d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
81fa88c615ed7c86766c907c33654d4d_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
81fa88c615ed7c86766c907c33654d4d_JaffaCakes118
-
Size
571KB
-
MD5
81fa88c615ed7c86766c907c33654d4d
-
SHA1
f272504d86d4e0190a8ad969e22418a07a733b02
-
SHA256
a3fc4c2e67de66540380f70a0071208d1f010037363e74e019353bdee7730072
-
SHA512
b05d14f999573144cda879a32e0eaf06e168a21839c0bddb0e8286618b8a55c00d0e0d951d5962d36948a403f5f62bac74061f99dfb12c71a88d62ca1e5d2b07
-
SSDEEP
6144:W2h0sV2PcJlSy4LAhuovBmIGB1ay6CM0q/UeNyT+jkUJPJiIBDu06rSZOKnmEZ3R:xJyAbC+FjAMyUyJiGWCtwfs1i+IShQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81fa88c615ed7c86766c907c33654d4d_JaffaCakes118
Files
-
81fa88c615ed7c86766c907c33654d4d_JaffaCakes118.exe windows:5 windows x86 arch:x86
bb476aea526dc32ee1bfe7ba8778dda8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
FindClose
FreeLibrary
GetProcAddress
LoadLibraryA
DeleteFileA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
FindFirstFileA
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
GetFileAttributesA
GetLastError
MultiByteToWideChar
WideCharToMultiByte
Sleep
GlobalFree
GlobalAlloc
Beep
CreateThread
GetCurrentDirectoryA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetFullPathNameA
GetModuleHandleA
GetTickCount
user32
SendMessageA
ShowWindow
GetCursorPos
DefWindowProcA
EndDialog
MessageBoxA
TrackPopupMenuEx
TranslateMessage
RegisterWindowMessageA
LoadIconA
SetForegroundWindow
KillTimer
CreatePopupMenu
PostQuitMessage
RegisterClassExA
GetMessageA
DialogBoxParamA
LoadImageA
SetLayeredWindowAttributes
SetWindowPos
SetWindowLongA
IsDialogMessageA
CopyImage
CreateDialogParamA
DestroyWindow
GetSysColor
InsertMenuA
AppendMenuA
TrackPopupMenu
SendMessageW
SetTimer
CreateWindowExA
GetWindowLongA
GetDlgItem
GetDlgCtrlID
LoadCursorA
DestroyMenu
EnableWindow
DispatchMessageA
gdi32
SetBkMode
SetTextColor
GetStockObject
SetBkColor
CreateSolidBrush
CreateFontA
comdlg32
GetOpenFileNameW
shell32
Shell_NotifyIconA
ShellExecuteA
ole32
CoUninitialize
CoCreateInstance
CoInitializeEx
CoTaskMemFree
CreateStreamOnHGlobal
CoTaskMemAlloc
CLSIDFromProgID
oleaut32
OleLoadPicture
SysAllocString
SysFreeString
winmm
PlaySoundA
msvcp90
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?id@?$ctype@D@std@@2V0locale@2@A
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?tolower@?$ctype@D@std@@QBEDD@Z
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
??1locale@std@@QAE@XZ
??0locale@std@@QAE@XZ
??Bid@locale@std@@QAEIXZ
?_Decref@facet@locale@std@@QAEPAV123@XZ
?_Incref@facet@locale@std@@QAEXXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHPBD@Z
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IPBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPADII@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
wininet
InternetOpenUrlA
InternetReadFile
InternetOpenA
InternetCloseHandle
msvcr90
memset
__CxxFrameHandler3
_controlfp_s
_invoke_watson
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
abort
strcpy_s
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
strncmp
strncpy_s
isdigit
fseek
ftell
fread
??2@YAPAXI@Z
fclose
fwrite
_CxxThrowException
fopen_s
vsprintf_s
malloc
free
sscanf_s
??3@YAXPAX@Z
Sections
.text Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 490KB - Virtual size: 489KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ