D:\Dateien\Simon\Schule\Informatik Lennartz\Steine\Debug\Steine.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8d7123f6aba90264a13a957bd4ff4a22_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8d7123f6aba90264a13a957bd4ff4a22_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8d7123f6aba90264a13a957bd4ff4a22_JaffaCakes118
-
Size
29KB
-
MD5
8d7123f6aba90264a13a957bd4ff4a22
-
SHA1
e1f3b4f2a53d755a4e4c1de4a3930cde1f480b6c
-
SHA256
b15fb7bc7ed6ac75bd1cbe9fb46c5365f8703e518c574752c39878f8c17f81de
-
SHA512
d368a83a110594599eed2510ea6586a1932727060c8fd9ce07d9f7907cff86ee39f9c92556d910f4c7e25aebdfe19e31976494f5eb4d0217a3479f3e5383a945
-
SSDEEP
384:+YoqzanXOvVY5WQKtGmOxqA26vTwUbiquFybV7B:+5qzmsVvHtO8Ax0UtZ7B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d7123f6aba90264a13a957bd4ff4a22_JaffaCakes118
Files
-
8d7123f6aba90264a13a957bd4ff4a22_JaffaCakes118.exe windows:5 windows x86 arch:x86
f9e99fcdcff4285b12eb35b57f45f9bd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcr100d
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
_invoke_watson
_controlfp_s
?terminate@@YAXXZ
_crt_debugger_hook
_initterm_e
_initterm
_CrtDbgReportW
_CrtSetCheckCount
__initenv
exit
_cexit
_XcptFilter
_exit
__getmainargs
_amsg_exit
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_CRT_RTC_INITW
sqrt
printf
_getch
kernel32
EncodePointer
FreeLibrary
VirtualQuery
GetModuleFileNameW
GetProcessHeap
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LoadLibraryW
GetProcAddress
lstrlenA
RaiseException
MultiByteToWideChar
IsDebuggerPresent
WideCharToMultiByte
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
Sections
.textbss Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ