flfl.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8ac64190a3ca6bd031fe70d5faf1cfef_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
8ac64190a3ca6bd031fe70d5faf1cfef_JaffaCakes118
-
Size
156KB
-
MD5
8ac64190a3ca6bd031fe70d5faf1cfef
-
SHA1
a51366fd4e29c4ccac32e0f67434b5cbeca8e6c0
-
SHA256
a0901c281c41aba0d2c34468cb4da238a28cebcd2d6649defc44fc3295b144ab
-
SHA512
7a063a1c84a7b710df583b904ddd623fc293a40aedb58fdc5a398e95f84240cd78c2242e18eab2037d71cd6ac2fb2c2981257b0fcd8820ed5ae77201839e49bd
-
SSDEEP
3072:2Hq8/eYoUW8DneXJRDcTHS5kpuJF8GvYQeCUwvg9B2H:AF/6EDSRmHS5kampQxQB2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 8ac64190a3ca6bd031fe70d5faf1cfef_JaffaCakes118
Files
-
8ac64190a3ca6bd031fe70d5faf1cfef_JaffaCakes118.exe windows:4 windows x86 arch:x86
2c02bbc81dd2cf06c35d4cdf18b40bad
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
winmm
midiOutGetDevCapsA
kernel32
CreateToolhelp32Snapshot
TlsAlloc
MoveFileW
CloseHandle
LoadLibraryExW
LoadLibraryA
GetModuleHandleA
GetProcAddress
OutputDebugStringA
user32
UpdateWindow
setupapi
SetupInitDefaultQueueCallback
urlmon
CoInternetCreateSecurityManager
gdi32
GdiFlush
Exports
Exports
Frgncm
Sections
.rdar Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1w.+R8X Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ