d:\1337 $\SIMPLE DOWNLOADER\Debug\main.pdb
Static task
static1
Behavioral task
behavioral1
Sample
bc1b081c500e3e21f9caed8f93047f28_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bc1b081c500e3e21f9caed8f93047f28_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bc1b081c500e3e21f9caed8f93047f28_JaffaCakes118
-
Size
467KB
-
MD5
bc1b081c500e3e21f9caed8f93047f28
-
SHA1
c9175f2f4a143595fd135e74eb8b0314b63fa1b2
-
SHA256
3d3873c96a71fe852c4daa8e032248d80d6cd4a3d2726599e8e4dadd15b7cdb0
-
SHA512
2679c0bf8f538d3322bd2d68d6520d6ba3a9814139ea8ff9dd2ebc4b4e5c9cd82c71e08e19175025ebf87e84052c154970d9d03ea4d10f8ab4a1747194bd2fd6
-
SSDEEP
6144:SD33VVgRXiGUGiAbnEWDi61M5EqX2md0RXJWX89uKVkftdiu12Fnm:SrIdiGUGfEM71M57X2QMZUe+Ww
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc1b081c500e3e21f9caed8f93047f28_JaffaCakes118
Files
-
bc1b081c500e3e21f9caed8f93047f28_JaffaCakes118.exe windows:5 windows x86 arch:x86
5162e4bb41586e7e4a4f0bba8e6d337e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
ReleaseMutex
ExitProcess
GetModuleFileNameA
CreateMutexA
GetModuleHandleA
CreateToolhelp32Snapshot
Process32First
GetLastError
Process32Next
CompareStringW
CompareStringA
GetTimeZoneInformation
ReadFile
SetEndOfFile
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetModuleHandleW
Sleep
InterlockedIncrement
InterlockedDecrement
GetProcAddress
RaiseException
GetCommandLineA
HeapValidate
IsBadReadPtr
IsDebuggerPresent
DebugBreak
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
LoadLibraryA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
CloseHandle
WriteFile
GetConsoleCP
GetConsoleMode
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
GetCurrentThread
GetStdHandle
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
DeleteCriticalSection
FatalAppExitA
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
GetProcessHeap
VirtualQuery
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
SetStdHandle
FlushFileBuffers
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
CreateFileA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoW
GetLocaleInfoA
GetTimeFormatA
GetDateFormatA
SetEnvironmentVariableA
advapi32
RegSetValueExA
RegCloseKey
GetUserNameA
RegOpenKeyExA
shell32
ShellExecuteA
ord680
wininet
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetOpenA
Sections
.textbss Size: - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 380KB - Virtual size: 379KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ