mshta.pdb
Static task
static1
Behavioral task
behavioral1
Sample
84e294a4f1d3c0fd9ebabf2d5a0ec44b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
84e294a4f1d3c0fd9ebabf2d5a0ec44b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
84e294a4f1d3c0fd9ebabf2d5a0ec44b_JaffaCakes118
-
Size
4.9MB
-
MD5
84e294a4f1d3c0fd9ebabf2d5a0ec44b
-
SHA1
f664b44df36e939355947fbf150b2eb755a0fac8
-
SHA256
05f78ac9754bbefde6481d5849b87a2c8daf5b465bcaa54cc31adb21179035f6
-
SHA512
c2cb3fd9ab604c72185f716f1d7e974dda3e3deb2dfa6866fff91158c07894144c117cf8d4c04b39d8dbbe0e2c50a7f29731b0b7e52cf51e03f7b416e9e5ed21
-
SSDEEP
49152:+rGtlj4oJdXN0BMOwLloBrugXuA0vbK35DMnCIjtAyK8xmN3Aek03noj45wlDTwB:jJdXN0B7+sluAOp55geUJF3noxDsbDF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84e294a4f1d3c0fd9ebabf2d5a0ec44b_JaffaCakes118
Files
-
84e294a4f1d3c0fd9ebabf2d5a0ec44b_JaffaCakes118.exe windows:5 windows x86 arch:x86
b318adeca8983660bd5e7556f344d941
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
kernel32
FreeLibrary
GetProcAddress
LoadLibraryA
ExpandEnvironmentStringsA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsFree
SetLastError
GetCurrentThreadId
TlsSetValue
TlsGetValue
TlsAlloc
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapAlloc
LeaveCriticalSection
EnterCriticalSection
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ