cnbjmon.pdb
Static task
static1
Behavioral task
behavioral1
Sample
bc9e3fd014ac71dbfd21c3a4c5c18d3e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bc9e3fd014ac71dbfd21c3a4c5c18d3e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bc9e3fd014ac71dbfd21c3a4c5c18d3e_JaffaCakes118
-
Size
182KB
-
MD5
bc9e3fd014ac71dbfd21c3a4c5c18d3e
-
SHA1
7de2bb2040ea9b8e913be7e551c4a4cefe082a85
-
SHA256
995aa928ac032b468e31344b3f0145564d493c3b5137a4dd44020ef1bda6d325
-
SHA512
367b7b7920f64ac9428302e4927e1bdcced05f7232de58143d470d21d05266883ef943a4c5d48e93760183d59ef4c95521f146f2435b23704103659dae6dab3a
-
SSDEEP
3072:pwISayJ/gUmrj9yHCIqk6TLaltXiel5WLY7sH8AUOnVnRLE5TMjl4923HJRNdteC:pwIJyJ/gUmvIHCHk6CHXiemLY7scDOnK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc9e3fd014ac71dbfd21c3a4c5c18d3e_JaffaCakes118
Files
-
bc9e3fd014ac71dbfd21c3a4c5c18d3e_JaffaCakes118.exe windows:5 windows x86 arch:x86
48464cda90653043315206d86087ec6c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetOEMCP
GetACP
LoadLibraryA
Sleep
GlobalAlloc
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
LocalFree
LoadLibraryW
GetVersion
lstrcpynW
GetConsoleOutputCP
GetSystemDefaultLangID
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
FreeEnvironmentStringsA
GetModuleHandleA
GetCurrentProcess
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
lstrcmpW
IsSystemResumeAutomatic
GlobalFree
SetLastError
GetProcAddress
msvcrt
sprintf
malloc
free
_except_handler3
user32
SetWindowPos
GetForegroundWindow
GetCapture
GetInputState
GetDesktopWindow
GetFocus
SetWindowLongW
CharNextW
GetCursor
GetWindowLongW
GetActiveWindow
GetDlgItemTextW
EnableWindow
GetDlgItem
WinHelpW
SetDlgItemTextW
LoadIconW
GetClipboardViewer
SetWindowTextW
wsprintfW
LoadStringW
SetTimer
spoolss
GetPrinterDataW
RevertToPrinterSelf
ImpersonatePrinterClient
GetJobW
EnumPrinterDataW
AddPerMachineConnectionW
OpenPrinterW
GetPrinterDriverW
SetJobW
SetPortW
ClosePrinter
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 138KB - Virtual size: 329KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ