f:\Perforce\DevNero9\BUSAutostart\Release\discinfo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
836bc773ca3cf455d7d183f71c0e8afc_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
836bc773ca3cf455d7d183f71c0e8afc_JaffaCakes118
-
Size
505KB
-
MD5
836bc773ca3cf455d7d183f71c0e8afc
-
SHA1
9097fc94ee9f993c8410872b40bfb38c1d39cbe7
-
SHA256
d977a0967f4d19e59b2352e832e2a336a7852a06eaec1f74676969d0ada2ff85
-
SHA512
c09eb1fd718d423dbd180ef383c2e890452dfced37a1d14cbdac3574b689e62d42a40004712b64867af652b5cde057317d4fa874052b28413a38c821f3b20560
-
SSDEEP
12288:6uLbxKWzYaCV1fhCHURBuw/ACYpmgFau5DUQ8w:xbwWsj1fhN/A/Ae5Vn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 836bc773ca3cf455d7d183f71c0e8afc_JaffaCakes118
Files
-
836bc773ca3cf455d7d183f71c0e8afc_JaffaCakes118.exe windows:4 windows x86 arch:x86
b6f795523dfbf385e12333a133c722ea
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetSystemDefaultLangID
FindResourceExW
GetUserDefaultLangID
FindResourceW
CreateDirectoryW
LoadResource
FormatMessageW
GetModuleFileNameW
CompareStringW
CompareStringA
FlushFileBuffers
SizeofResource
LockResource
FreeResource
WriteFile
CreateFileW
CloseHandle
GetLastError
GetTempPathW
GetComputerNameW
CreateFileA
WriteConsoleW
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileW
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeA
GetStringTypeW
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetFullPathNameW
GetCurrentDirectoryA
HeapSize
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetTimeZoneInformation
LoadLibraryA
SetFilePointer
GetConsoleCP
GetConsoleMode
GetLocaleInfoW
GetDriveTypeA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
SetEnvironmentVariableA
user32
GetDesktopWindow
MessageBoxW
advapi32
RegOpenKeyW
RegCloseKey
OpenServiceW
QueryServiceConfigW
QueryServiceStatus
OpenSCManagerW
CloseServiceHandle
RegQueryValueExW
shell32
ShellExecuteW
Sections
.text Size: 120KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE