d:\Projects\WinRAR\rar\build\sfxcon32\Release\sfxcon.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b2dbfc22a5d464932087acf54a36876a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b2dbfc22a5d464932087acf54a36876a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b2dbfc22a5d464932087acf54a36876a_JaffaCakes118
-
Size
78KB
-
MD5
b2dbfc22a5d464932087acf54a36876a
-
SHA1
d57132995ca45a66deebd336e7cd805478d8816c
-
SHA256
8887041ac005b94d96a1bc99fe8385037dccc762891c55abaee283d9d1f1c5ea
-
SHA512
c49dc2be29a66bdb9672c55eacf17e1a1b5dd7e683a97029dcaf8ce81d82883264ecb3d0f2230dfbdabe3cd805e28ae4d63ea75866cccae1d88dcf863e9b5a9f
-
SSDEEP
1536:rKLkvv0ApFxGlh0KDWYjG13CJm2zfcKvS8m6e69jX:rKGv0ALx8h0Ke3f765
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2dbfc22a5d464932087acf54a36876a_JaffaCakes118
Files
-
b2dbfc22a5d464932087acf54a36876a_JaffaCakes118.exe windows:5 windows x86 arch:x86
32b3a1a03450bf680332d456ba10d237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
Sleep
CloseHandle
GetCurrentProcess
SetFileTime
MoveFileW
SetFilePointer
SetEndOfFile
GetFileType
CreateFileA
CreateFileW
ReadFile
WriteFile
GetDriveTypeA
GetFileAttributesA
GetFileAttributesW
SetFileAttributesA
SetFileAttributesW
DeleteFileA
DeleteFileW
CreateDirectoryA
CreateDirectoryW
FindClose
FindNextFileA
FindFirstFileA
GetLastError
FindFirstFileW
GetVersionExW
GetCommandLineA
SetErrorMode
GetModuleFileNameW
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
CompareStringA
ExitProcess
GetProcAddress
GetModuleHandleW
LocalFileTimeToFileTime
SystemTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetSystemTime
WideCharToMultiByte
MultiByteToWideChar
CompareStringW
IsDBCSLeadByte
GetCPInfo
GetCurrentDirectoryW
GetStdHandle
GetConsoleMode
SetConsoleMode
FindNextFileW
ReadConsoleW
user32
CharUpperW
LoadStringW
CharToOemBuffA
CharUpperA
wvsprintfW
CharToOemBuffW
OemToCharBuffW
wvsprintfA
CharToOemA
OemToCharBuffA
OemToCharA
advapi32
LookupPrivilegeValueW
OpenProcessToken
SetFileSecurityA
SetFileSecurityW
AdjustTokenPrivileges
Sections
.text Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ