d:\Projects\WinRAR\rar\build\sfxcon32\Release\sfxcon.pdb
Static task
static1
Behavioral task
behavioral1
Sample
9650672d7f858a9031ef5bc051ef75da_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9650672d7f858a9031ef5bc051ef75da_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9650672d7f858a9031ef5bc051ef75da_JaffaCakes118
-
Size
72KB
-
MD5
9650672d7f858a9031ef5bc051ef75da
-
SHA1
fb97c99f8a97fc56bb6cc33755fbb73b95bfcc01
-
SHA256
40ca5f6350fce0ae18e04986c3ccf1a1c257556765b45a4c3aab0ec9dbe5cdf8
-
SHA512
371adfc61d749d33d4a497b1d4c350c06fb39c436791e3fd28990e0583a04b35a7dc005a3b395e02ea4ac676b28d0fdb0a76b47cb71d520975aa7ca706a66d51
-
SSDEEP
1536:ng6oN0eHR4vhCVA0s1p7edgYDTrxXFJR+p:g6oN0QmhC6hOXFGp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9650672d7f858a9031ef5bc051ef75da_JaffaCakes118
Files
-
9650672d7f858a9031ef5bc051ef75da_JaffaCakes118.exe windows:5 windows x86 arch:x86
f5bccbbf7f1a1d6e89398844e9ddb93c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetLastError
GetCurrentProcess
SetFileTime
MoveFileA
SetFilePointer
SetEndOfFile
GetFileType
CreateFileA
CreateFileW
ReadFile
WriteFile
GetDriveTypeA
GetFileAttributesA
GetFileAttributesW
SetFileAttributesA
SetFileAttributesW
DeleteFileA
DeleteFileW
CreateDirectoryA
CreateDirectoryW
CloseHandle
FindNextFileA
FindFirstFileA
FindNextFileW
FindFirstFileW
GetVersionExA
GetCommandLineA
SetErrorMode
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
CompareStringA
ExitProcess
LocalFileTimeToFileTime
SystemTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetSystemTime
WideCharToMultiByte
MultiByteToWideChar
IsDBCSLeadByte
GetCPInfo
Sleep
GetStdHandle
GetConsoleMode
SetConsoleMode
FindClose
ReadConsoleA
user32
CharToOemBuffA
CharUpperA
wvsprintfA
OemToCharA
CharToOemA
OemToCharBuffA
LoadStringA
advapi32
LookupPrivilegeValueA
OpenProcessToken
SetFileSecurityA
SetFileSecurityW
AdjustTokenPrivileges
Sections
.text Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ