d:\Programiranje\Bravo Studio\SVN\PlaySushi\Bin\uninstaller.pdb
Static task
static1
Behavioral task
behavioral1
Sample
bc3e0ec21d49594b2cdbe1e6bef07f7f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bc3e0ec21d49594b2cdbe1e6bef07f7f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bc3e0ec21d49594b2cdbe1e6bef07f7f_JaffaCakes118
-
Size
135KB
-
MD5
bc3e0ec21d49594b2cdbe1e6bef07f7f
-
SHA1
4dbe7b416e63e79cca044fc6e4367c8002d8aab0
-
SHA256
3dbd923048c0f1b4eb6fc64c06db0db17063cbcdb1149e471ab6767371b527a3
-
SHA512
39873981aaf336ab3ca5fb63f875a37b1547419c92213c730766bfe3a7cafb5d76d1d65b641a86087d021603caaf2df69b78e671cf7faa4ee2a4805acde685b8
-
SSDEEP
1536:Po4ch2heCBamtu6PBkwskgMSa52Q7gJ6DHk7VSoxA+u:PuCCZzXa52Q66DHA3xA+u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc3e0ec21d49594b2cdbe1e6bef07f7f_JaffaCakes118
Files
-
bc3e0ec21d49594b2cdbe1e6bef07f7f_JaffaCakes118.exe windows:5 windows x86 arch:x86
5dd4daecf1ea4a390ffc5935de617acb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
wnsprintfA
StrStrIA
StrNCatA
kernel32
GetModuleFileNameA
FindNextFileA
DeleteFileA
CloseHandle
CreateFileA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
RtlUnwind
InitializeCriticalSectionAndSpinCount
HeapSize
HeapReAlloc
VirtualAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LeaveCriticalSection
FindClose
RemoveDirectoryA
lstrcmpiA
FindFirstFileA
Sleep
FreeLibrary
MoveFileExA
GetCurrentProcessId
GetTickCount
lstrlenA
GetVersionExA
GetProcAddress
GetCurrentProcess
FlushFileBuffers
MultiByteToWideChar
GetConsoleMode
GetConsoleCP
SetFilePointer
GetCommandLineA
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetLastError
HeapFree
RaiseException
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
EnterCriticalSection
user32
GetWindowRect
RegisterClassExA
PostQuitMessage
SendDlgItemMessageA
FillRect
LoadBitmapA
LoadIconA
ExitWindowsEx
BeginPaint
IsDialogMessageA
TranslateMessage
MapVirtualKeyA
GetMessageA
CreateWindowExA
GetDlgItem
DefWindowProcA
GetSysColor
SetWindowPos
ShowWindow
DispatchMessageA
AdjustWindowRectEx
SetWindowTextA
UpdateWindow
LoadCursorA
SendMessageA
keybd_event
DestroyWindow
EndPaint
GetWindowLongA
gdi32
BitBlt
GetTextExtentPoint32A
DeleteDC
CreateFontA
SetBkMode
DeleteObject
SelectObject
GetObjectA
GetStockObject
CreateSolidBrush
TextOutA
CreateCompatibleDC
advapi32
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegCreateKeyA
RegDeleteKeyA
RegQueryValueExA
RegSetValueExA
shell32
SHGetFolderPathA
ShellExecuteA
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ