C:\Users\Hamlet-Junior\documents\visual studio 2010\Projects\CONCEPT_CONSOLE\Debug\CONCEPT_CONSOLE.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b68c08c4baafc734b8f7012f4c61ea12_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b68c08c4baafc734b8f7012f4c61ea12_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b68c08c4baafc734b8f7012f4c61ea12_JaffaCakes118
-
Size
1.1MB
-
MD5
b68c08c4baafc734b8f7012f4c61ea12
-
SHA1
da41b194a9c7c1b6db445ef28cce2cd53b4bb103
-
SHA256
85f7c4a1a1a2300430701fd331f9a633b65cb8029ac8dd56b3806619775867b3
-
SHA512
e80de82abbee625292e35804ec95b39ea7ca11dc31ede830391b23eaaca07f5da85ddf1c8964e0471ee92b43954048f0d86db53417721352675f1fc7e8b8fb94
-
SSDEEP
12288:LDH+xVwf1eQd+u2IcN4+QHvY3lNfIX4t2GkrEVTyLA6f4tkynCWG9tijIdZ:P+xVwlA4dHWwItAEImkyat0I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b68c08c4baafc734b8f7012f4c61ea12_JaffaCakes118
Files
-
b68c08c4baafc734b8f7012f4c61ea12_JaffaCakes118.exe windows:5 windows x86 arch:x86
264b387a3ba082cfb34a67b614a72967
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetStdHandle
InterlockedExchangeAdd
GetLastError
GetQueuedCompletionStatus
SetLastError
InterlockedCompareExchange
InterlockedDecrement
SetWaitableTimer
Sleep
EnterCriticalSection
LeaveCriticalSection
ReleaseSemaphore
SetEvent
CloseHandle
CreateEventA
TlsGetValue
WaitForSingleObject
GetSystemTimeAsFileTime
TlsSetValue
CreateIoCompletionPort
WaitForMultipleObjects
HeapFree
GetProcessHeap
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
QueueUserAPC
TerminateThread
HeapAlloc
CreateSemaphoreA
TlsAlloc
TlsFree
SetConsoleTextAttribute
CompareStringW
CreateFileW
VirtualQuery
FreeLibrary
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoA
GetStringTypeW
FlushFileBuffers
SetFilePointer
ReadFile
GetConsoleMode
GetConsoleCP
SetStdHandle
GetStartupInfoW
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
QueryPerformanceCounter
GetTimeZoneInformation
IsValidCodePage
GetOEMCP
GetACP
HeapDestroy
HeapCreate
HeapQueryInformation
HeapSize
HeapReAlloc
GetModuleFileNameA
OutputDebugStringW
OutputDebugStringA
IsProcessorFeaturePresent
PostQueuedCompletionStatus
InterlockedExchange
GetLocaleInfoW
WriteFile
FatalAppExitA
LoadLibraryW
lstrlenA
GetCurrentThread
ExitProcess
SetEnvironmentVariableA
WideCharToMultiByte
EncodePointer
DecodePointer
InitializeCriticalSection
MultiByteToWideChar
FormatMessageA
LocalFree
ResumeThread
GetTickCount
GetSystemInfo
SystemTimeToFileTime
ResetEvent
CreateWaitableTimerA
OpenEventA
GetCurrentProcessId
RtlUnwind
SetConsoleCtrlHandler
GetModuleFileNameW
WriteConsoleW
GetFileType
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapValidate
IsBadReadPtr
GetCommandLineA
HeapSetInformation
LCMapStringW
GetCPInfo
CreateThread
GetCurrentThreadId
ExitThread
GetProcAddress
GetModuleHandleW
ws2_32
getsockname
getnameinfo
getaddrinfo
sendto
freeaddrinfo
__WSAFDIsSet
select
gethostbyname
connect
accept
listen
send
socket
WSASendTo
WSAAddressToStringA
inet_addr
WSACleanup
WSARecvFrom
bind
WSAGetLastError
WSASocketW
setsockopt
WSASend
closesocket
ioctlsocket
ntohl
htons
htonl
WSASetLastError
WSAStringToAddressA
WSAStartup
recv
iphlpapi
GetIpAddrTable
GetBestRoute
wininet
InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
HttpQueryInfoW
InternetReadFile
InternetCloseHandle
Sections
.textbss Size: - Virtual size: 412KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 872KB - Virtual size: 872KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1024B - Virtual size: 514B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ