c:\work\Fport2\Release\Fport2.pdb
Static task
static1
Behavioral task
behavioral1
Sample
837c06c9f5ea272882e5296b8be57ec6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
837c06c9f5ea272882e5296b8be57ec6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
837c06c9f5ea272882e5296b8be57ec6_JaffaCakes118
-
Size
112KB
-
MD5
837c06c9f5ea272882e5296b8be57ec6
-
SHA1
653887693bdc1d1a0e6b9d1763570b46a22a21d3
-
SHA256
ce0ab1ec340b25ae28ff7b703341aa6cb4ab8a9b8c14643e9f25919feb83e061
-
SHA512
784143a088c991d16206f02d736bf78771f84c5809ce4e4f0d251f8f59bef081bcf71e2d6466023254946ae5983eafbe4dc5362faa343d2036a16e16075a118a
-
SSDEEP
1536:MjuCTX6fxpZL6MGLutrfoHJBnjoU7qhz9SCZ9qMWyF5Q12hmqf77Y3kbqiP0m:mwxp8aQbDWZ4MWyF5jzmYqiP0m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 837c06c9f5ea272882e5296b8be57ec6_JaffaCakes118
Files
-
837c06c9f5ea272882e5296b8be57ec6_JaffaCakes118.exe windows:4 windows x86 arch:x86
d5e297b3f5b319ff621e0f7c5759cb81
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ntdll
RtlUnwind
_chkstk
memchr
strcspn
sprintf
ZwQuerySystemInformation
ZwOpenFile
RtlInitUnicodeString
ZwOpenSection
memmove
psapi
EnumProcessModules
GetModuleBaseNameA
ws2_32
ntohs
kernel32
GetLocaleInfoW
LCMapStringW
LCMapStringA
ReadFile
SetStdHandle
VirtualQuery
GetSystemInfo
VirtualProtect
GetOEMCP
GetACP
GetProcAddress
GetVersionExA
FreeLibrary
MapViewOfFile
CloseHandle
UnmapViewOfFile
DuplicateHandle
GetCurrentProcess
OpenProcess
GetLastError
DeviceIoControl
CreateEventA
HeapFree
GetProcessHeap
GetCurrentProcessId
LoadLibraryA
HeapReAlloc
ExitProcess
RaiseException
GetModuleHandleA
GetCommandLineA
HeapAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
GetModuleFileNameA
SetUnhandledExceptionFilter
TerminateProcess
HeapSize
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetCPInfo
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
SetFilePointer
FlushFileBuffers
IsBadReadPtr
IsBadCodePtr
advapi32
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
Sections
.text Size: 88KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lif Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE