afwcon.pdb
Static task
static1
Behavioral task
behavioral1
Sample
bbf6215a9c3a754e3fad84ee579fd180_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bbf6215a9c3a754e3fad84ee579fd180_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bbf6215a9c3a754e3fad84ee579fd180_JaffaCakes118
-
Size
80KB
-
MD5
bbf6215a9c3a754e3fad84ee579fd180
-
SHA1
914aab3cda4bb90e01b7ff98221ec4ec7d5f7d4e
-
SHA256
ba20c8199dbbf1e5ec4294aab98eb802ad497776691cfd8fc3d66a5189362d3b
-
SHA512
ec1f86902c35752601c4011dcc9088eca597f78551a859de6d0565b30c62efff7b2124af63d695e65631e2ba576cabafcdade0b458336296ff1d0b5420ae87e6
-
SSDEEP
1536:ONzuLE2ZMFff3d6Vah0qYyO8N9Q1pXEVYUx5Z+0oyzsEbLdQx:xE3f3d3CqYyOKeUV7x5Z+XqsEbpc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bbf6215a9c3a754e3fad84ee579fd180_JaffaCakes118
Files
-
bbf6215a9c3a754e3fad84ee579fd180_JaffaCakes118.exe windows:6 windows x64 arch:x64
2d97fd6960fdf62a1de1706afec8f404
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
advapi32
RegCloseKey
RegSetValueExW
RegCreateKeyExW
kernel32
SetConsoleCtrlHandler
ExitProcess
CloseHandle
GetOverlappedResult
WaitForMultipleObjects
DeviceIoControl
CreateEventA
CreateFileA
ReadFile
GetLastError
LocalFree
FormatMessageA
HeapAlloc
HeapFree
GetProcessHeap
GetCurrentProcess
GetVolumeNameForVolumeMountPointW
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
TerminateProcess
Sleep
SetUnhandledExceptionFilter
GetModuleHandleW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
RtlCaptureContext
msvcp60
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
?width@ios_base@std@@QEAA_J_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@XZ
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?endl@std@@YAAEAV?$basic_ostream@GU?$char_traits@G@std@@@1@AEAV21@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@PEBG_KAEBV?$allocator@G@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
?setf@ios_base@std@@QEAAHHH@Z
??6std@@YAAEAV?$basic_ostream@DU?$char_traits@D@std@@@0@AEAV10@D@Z
??6std@@YAAEAV?$basic_ostream@DU?$char_traits@D@std@@@0@AEAV10@PEBD@Z
??8std@@YA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PEBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?wcout@std@@3V?$basic_ostream@GU?$char_traits@G@std@@@1@A
?write@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@PEBG_J@Z
?endl@std@@YAAEAV?$basic_ostream@DU?$char_traits@D@std@@@1@AEAV21@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ
??1_Winit@std@@QEAA@XZ
??1Init@ios_base@std@@QEAA@XZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??0_Winit@std@@QEAA@XZ
??0Init@ios_base@std@@QEAA@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBDAEBV?$allocator@D@1@@Z
??6std@@YAAEAV?$basic_ostream@GU?$char_traits@G@std@@@0@AEAV10@AEBV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
msvcrt
_exit
_cexit
exit
_initterm
_amsg_exit
__setusermatherr
_commode
_fmode
__set_app_type
_unlock
__dllonexit
_lock
_onexit
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
__C_specific_handler
__getmainargs
_callnewh
malloc
_CxxThrowException
free
??0exception@@QEAA@AEBV0@@Z
??1exception@@UEAA@XZ
?what@exception@@UEBAPEBDXZ
??0exception@@QEAA@AEBQEBDH@Z
_vsnprintf
_snwprintf
wprintf
printf
_getch
_errno
clock
srand
strtoul
_atoi64
__CxxFrameHandler3
_XcptFilter
ws2_32
inet_addr
htons
inet_ntoa
ntohs
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ