e:\!CryptorV3\cryptor\wsmt2\Release\WSMT.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b3044314899da235d0aaeb13a641cf59_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b3044314899da235d0aaeb13a641cf59_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b3044314899da235d0aaeb13a641cf59_JaffaCakes118
-
Size
348KB
-
MD5
b3044314899da235d0aaeb13a641cf59
-
SHA1
8284de80985bb18f9fcf0a8fb28eb9b9ed7032ba
-
SHA256
9e4f92ed620667ed7f38fbebcd521ab03f70b9d6cff1e58f34a3145fb1ccaeae
-
SHA512
89f5c4cf8cfb3e7884de9a816a5750b2dfa98dd77940a4f9b7bc28a1737e740a112a554ff452ff2c5a8f9e5525a08619ff51b01fe9f1674de71937f2ef8612f4
-
SSDEEP
6144:U3gixZXWBV40ka8M8DiO+kaOeLy4kZrnzLpoiAlFssHdvx3NaQL3G5gBW0kt:5s8V40j9ui76/ZrzLponlFssHd9rLCg4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3044314899da235d0aaeb13a641cf59_JaffaCakes118
Files
-
b3044314899da235d0aaeb13a641cf59_JaffaCakes118.exe windows:4 windows x86 arch:x86
2571c5c1d3a25539d7b4dced616976ec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetLocalTime
GetLastError
GetModuleHandleA
VirtualProtectEx
GetProcAddress
advapi32
CryptExportKey
ConvertSidToStringSidW
DeleteAce
CreateWellKnownSid
CryptGenKey
CryptCreateHash
CryptDeriveKey
avifil32
CreateEditableStream
winmm
midiInClose
Sections
.text Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 657B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 200KB - Virtual size: 685KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ