c:\Documents and Settings\Administrator\My Documents\Dev\usecase\client - server\client\Debug\client.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8cc7ae18efd7a7721fd255c122d78997_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
8cc7ae18efd7a7721fd255c122d78997_JaffaCakes118
-
Size
508KB
-
MD5
8cc7ae18efd7a7721fd255c122d78997
-
SHA1
a29e4aca70bef4af8ce75af51032b6b91572aa0d
-
SHA256
aa2c44a246a21cba4078ead35042cfdd05d0f4bb44028327fbbf26618cbca7d9
-
SHA512
b82369f062b03e326f47dcf06a78b10d6ad4a9e35984d7c4cc6e7e24c2762b2edc04b581805adfc1854fa2c355a85effbddd3e94614917dd574ea833f7e262c6
-
SSDEEP
6144:I0xPyuB7QQbvNjLytAGfG0bwUR10SVk7odYe6eCXShQzYNeNM25:ee13yeGfG0P10SPYe6eC3z4i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cc7ae18efd7a7721fd255c122d78997_JaffaCakes118
Files
-
8cc7ae18efd7a7721fd255c122d78997_JaffaCakes118.exe windows:5 windows x86 arch:x86
31267cae4afc005063cc9349b6c82a2e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ws2_32
WSAStartup
WSAGetLastError
WSACleanup
htons
inet_ntoa
socket
bind
connect
send
closesocket
inet_addr
gethostbyname
kernel32
SetLastError
SetEndOfFile
GetConsoleOutputCP
WriteConsoleA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetDateFormatA
GetTimeFormatA
CreateFileA
FreeLibrary
GetProcAddress
LoadLibraryA
CreateProcessA
Sleep
GetConsoleWindow
GetLocaleInfoA
GetLocaleInfoW
GetModuleHandleW
InterlockedIncrement
InterlockedDecrement
ExitProcess
GetSystemTimeAsFileTime
RaiseException
GetCommandLineA
HeapValidate
IsBadReadPtr
IsDebuggerPresent
DebugBreak
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameW
GetLastError
GetFileAttributesA
CloseHandle
ReadFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
SetFilePointer
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
GetTimeZoneInformation
GetCurrentThread
GetModuleFileNameA
WriteFile
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
FatalAppExitA
SetConsoleCtrlHandler
InterlockedExchange
InitializeCriticalSectionAndSpinCount
RtlUnwind
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
GetProcessHeap
VirtualQuery
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
GetExitCodeProcess
WaitForSingleObject
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
ShowWindow
Sections
.textbss Size: - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 417KB - Virtual size: 416KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ