C:\Users\Matthias\5DAE\Oplossingen\VerkennenEnTekenen\Debug\VerkennenEnTekenen.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a6f028239bfb8bbfae7d8234970124f7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a6f028239bfb8bbfae7d8234970124f7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a6f028239bfb8bbfae7d8234970124f7_JaffaCakes118
-
Size
269KB
-
MD5
a6f028239bfb8bbfae7d8234970124f7
-
SHA1
c1c3d25b48731b8ce827bfd5121e0ee5b954097f
-
SHA256
3e412282cf5198c90219999e36b13b6f2413fc36268ea8a20a1ed0d36d695c74
-
SHA512
672b837c082850cdeee36293f0b7e9c897616b690d5f083b49dc74f5884044f23292571c410d439d95000b80983be0ae097f1f92c66e45d0e78411ec3df83eba
-
SSDEEP
3072:CI8hsrqa2EM2DSuqJ+WEhqi5wcGi0V+8UpgOOGzdX/:CD1hISuqJ+WBPcvK+KOOGzF/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6f028239bfb8bbfae7d8234970124f7_JaffaCakes118
Files
-
a6f028239bfb8bbfae7d8234970124f7_JaffaCakes118.exe windows:5 windows x86 arch:x86
d47dd20075c465cb04d91142c4e06f91
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
InterlockedCompareExchange
InterlockedExchange
EncodePointer
LoadLibraryW
HeapSetInformation
lstrlenA
RaiseException
IsDebuggerPresent
GetSystemTimeAsFileTime
GetStartupInfoW
DecodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
HeapFree
HeapAlloc
GetProcessHeap
GetModuleFileNameW
VirtualQuery
FreeLibrary
QueryPerformanceCounter
GetCurrentProcessId
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalReAlloc
OutputDebugStringW
MultiByteToWideChar
WideCharToMultiByte
DeleteTimerQueueTimer
CreateTimerQueueTimer
CreateDirectoryW
FindResourceW
LoadResource
LockResource
SizeofResource
CreateFileW
WriteFile
FreeResource
GetTickCount
GetCurrentThreadId
Sleep
WaitForSingleObject
CloseHandle
GetProcAddress
CreateThread
user32
SetRect
GetAsyncKeyState
WaitMessage
PostMessageW
MessageBoxA
MessageBoxW
SetFocus
EnumChildWindows
DrawTextW
GetWindowRect
DefWindowProcW
PostQuitMessage
SendMessageW
EndPaint
BeginPaint
LoadImageW
LoadBitmapW
GetWindowDC
DestroyWindow
MoveWindow
EnableWindow
CallWindowProcW
GetParent
PtInRect
GetCursorPos
LoadIconW
LoadCursorW
RegisterClassExW
CreateWindowExW
ShowWindow
UpdateWindow
EnumDisplaySettingsW
ChangeDisplaySettingsW
GetWindowLongW
SetWindowLongW
SetWindowPos
SetWindowRgn
GetSystemMetrics
ShowCursor
InvalidateRect
AttachThreadInput
PeekMessageW
TranslateMessage
DispatchMessageW
GetDC
GetClientRect
ReleaseDC
gdi32
RoundRect
Rectangle
Polyline
CreateSolidBrush
BeginPath
EndPath
StrokeAndFillPath
CreatePen
MoveToEx
LineTo
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
StretchBlt
DeleteDC
DeleteObject
Arc
Ellipse
Pie
SetBkMode
SetTextColor
TextOutW
GetObjectW
CreateFontIndirectW
CreateBitmap
SetDIBits
GetDIBits
SetBkColor
CreateRectRgn
CreateEllipticRgn
CreatePolygonRgn
CombineRgn
ExtCreateRegion
BitBlt
CreateDIBSection
OffsetRgn
GetRgnBox
PtInRegion
StrokePath
msvcp100d
?_DebugHeapTag_func@std@@YAABU_DebugHeapTag_t@1@XZ
??2@YAPAXIABU_DebugHeapTag_t@std@@PADH@Z
??3@YAXPAXABU_DebugHeapTag_t@std@@PADH@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?id@?$codecvt@DDH@std@@2V0locale@2@A
??Bid@locale@std@@QAEIXZ
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Incref@facet@locale@std@@QAEXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
?_Decref@facet@locale@std@@QAEPAV123@XZ
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Debug_message@std@@YAXPB_W0I@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
??Bios_base@std@@QBEPAXXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Getpfirst@_Container_base12@std@@QBEPAPAU_Iterator_base12@2@XZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_BADOFF@std@@3_JB
??1_Container_base12@std@@QAE@XZ
??0_Container_base12@std@@QAE@XZ
?_Orphan_all@_Container_base12@std@@QAEXXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
msimg32
AlphaBlend
TransparentBlt
winmm
mciSendStringW
timeGetTime
msvcr100d
_amsg_exit
__getmainargs
_exit
_XcptFilter
_cexit
exit
_ismbblead
_acmdln
_CrtSetCheckCount
_initterm
_initterm_e
_unlock
__dllonexit
_lock
_onexit
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_controlfp_s
_invoke_watson
__set_app_type
_fmode
_commode
__setusermatherr
__CxxFrameHandler3
??3@YAXPAX@Z
??2@YAPAXI@Z
srand
malloc
??_V@YAXPAX@Z
sqrt
tan
wcscpy_s
memset
_purecall
wcslen
strcpy_s
strlen
wcscat_s
_itoa_s
_ultoa_s
_gcvt_s
wcscmp
_wtoi
wcstod
memcpy
_invalid_parameter
_CrtDbgReportW
_lock_file
_unlock_file
fwrite
fputc
ungetc
memcpy_s
fgetc
fgetpos
_fseeki64
fsetpos
setvbuf
fflush
memmove
fclose
_CxxThrowException
free
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
_CRT_RTC_INITW
_configthreadlocale
Sections
.textbss Size: - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ