g:\Acro_root_vg\Viewer\Win\output\acrobat\AcrobatInfo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a242ec76c41aabc77d0be5da6b151d5e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a242ec76c41aabc77d0be5da6b151d5e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a242ec76c41aabc77d0be5da6b151d5e_JaffaCakes118
-
Size
58KB
-
MD5
a242ec76c41aabc77d0be5da6b151d5e
-
SHA1
d934ffe8c29990b2351031687d8828aabde1497b
-
SHA256
dacbfc4a36d15ed75b585bb11226b5ed1504ef7fd0a5fc73714c95fb94483d26
-
SHA512
b081035ec136f9afe482fc188497da1a8ca4a072d10aa8add8cec81d83489374428bf6b8a39834e90e78a1e9444927e3c38c067807efc79036986ef787d80a34
-
SSDEEP
1536:QYknPebBXwx42LKkvP08eDHeQBjVaOkx:4IkvPZbQKOk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a242ec76c41aabc77d0be5da6b151d5e_JaffaCakes118
Files
-
a242ec76c41aabc77d0be5da6b151d5e_JaffaCakes118.exe windows:4 windows x86 arch:x86
58de811c6b94f3e594138bdb4f57cb21
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
LoadLibraryA
FreeLibrary
GetProcAddress
SetUnhandledExceptionFilter
GetModuleHandleA
GetStartupInfoA
msvcr71
_exit
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
_amsg_exit
_c_exit
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
_controlfp
strstr
__getmainargs
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 1002B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oqtqsid Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE