*#qyY=gePuf8ds5YOX5n|AhOEyeJQ.pdb
Static task
static1
Behavioral task
behavioral1
Sample
94c2eb98eaf6dc43b1f2f8238d559c4a_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
94c2eb98eaf6dc43b1f2f8238d559c4a_JaffaCakes118
-
Size
136KB
-
MD5
94c2eb98eaf6dc43b1f2f8238d559c4a
-
SHA1
0cfa325c0e7ad59d5e2a49b55d3696029ef3e081
-
SHA256
3406b39d07f45487ad81ab122fc4b92c2e4c340a08c299f34d5985b7489fc26a
-
SHA512
208b9f744782fe90166cc641356fac6a45188850bab5b69ddf69b9a36392d63f6895c3ac412d772ae8ae19684b7619a0013830904fdde2b333205a4d8a7c9af2
-
SSDEEP
3072:21hv9vef2eogV2Mo6+0PveULdXMJ1/OgO5nDA:2jvxc2tfnB03XCzOg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94c2eb98eaf6dc43b1f2f8238d559c4a_JaffaCakes118
Files
-
94c2eb98eaf6dc43b1f2f8238d559c4a_JaffaCakes118.exe windows:6 windows x86 arch:x86
d6491dcfbdcac9aa8aa67995a2ad0fc4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
oleaut32
VarCyFromI1
VarCyCmpR8
VarCyFromR8
msvcrt
strcmp
srand
powrprof
GetPwrCapabilities
kernel32
EnterCriticalSection
GetCommandLineW
IsValidLocaleName
GetVersion
CloseHandle
GetTimeFormatW
FormatMessageW
FindNextVolumeMountPointW
GetFileTime
Module32FirstW
lstrcmpW
InitAtomTable
CreatePipe
GlobalAlloc
SetConsoleOutputCP
gdi32
GetPixel
GetObjectW
GetPaletteEntries
GetTextExtentPoint32A
user32
GetProcessWindowStation
GetDesktopWindow
GetWindowContextHelpId
GetWindowInfo
LockWindowUpdate
GetWindowRect
EnumThreadWindows
EnumWindowStationsA
DdeAddData
ShowOwnedPopups
DdeConnectList
CloseClipboard
advapi32
EnumServicesStatusA
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 104KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 660B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ