mdres.pdb
Static task
static1
Behavioral task
behavioral1
Sample
941e66d902331aae32b45ef7562b65a5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
941e66d902331aae32b45ef7562b65a5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
941e66d902331aae32b45ef7562b65a5_JaffaCakes118
-
Size
113KB
-
MD5
941e66d902331aae32b45ef7562b65a5
-
SHA1
148f07c06374656e20af3eb0d08a9b55aac930a8
-
SHA256
3a2e02aa7b48ca9d277b159760f137e26f6de6e290771ab31b9f341d42a1b09f
-
SHA512
cde36f1bde80e9a97722935907ac60002d1a29980e961fa77498b7df63d2061b686bd8012217109e40b344f92bc21166eec34bfc356f573cbdd1ec3d3b057b99
-
SSDEEP
3072:+ISDve/FO+VQDUcUNWs+jm6jjsueGhL0xc:t/FfMBghAmtueoL0u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 941e66d902331aae32b45ef7562b65a5_JaffaCakes118
Files
-
941e66d902331aae32b45ef7562b65a5_JaffaCakes118.exe windows:6 windows x86 arch:x86
df04be4f516c5847409c6700217cc5ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
advapi32
TraceMessage
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
UnregisterTraceGuids
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
kernel32
GetTickCount
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetModuleHandleW
GetLastError
HeapSetInformation
UnhandledExceptionFilter
CompareStringW
QueryPerformanceCounter
GetCurrentProcess
user32
CreateWindowExW
PostQuitMessage
UnregisterClassW
LoadStringW
GetMessageW
LoadIconW
DestroyWindow
DefWindowProcW
DispatchMessageW
TranslateMessage
RegisterClassExW
msvcrt
exit
_initterm
_XcptFilter
_exit
_cexit
__wgetmainargs
_vsnwprintf
memset
??2@YAPAXI@Z
??3@YAXPAX@Z
_controlfp
_except_handler4_common
?terminate@@YAXXZ
_amsg_exit
__p__fmode
__p__commode
__setusermatherr
__set_app_type
ntdll
WinSqmAddToStream
shell32
Shell_NotifyIconW
comctl32
ord345
ole32
CoUninitialize
CoInitializeSecurity
CoInitializeEx
CoCreateInstance
CoInitialize
oleaut32
SysFreeString
VariantInit
SysAllocString
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 948B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ugilnxu Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE