c:\Users\User\Desktop\2005\AStar the 3206910302001\AStar Project\Release\Pathfinding.pdb
Static task
static1
Behavioral task
behavioral1
Sample
cf4dc7fe71e7917387fbdfabd7877769_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
cf4dc7fe71e7917387fbdfabd7877769_JaffaCakes118
-
Size
496KB
-
MD5
cf4dc7fe71e7917387fbdfabd7877769
-
SHA1
65ad64b37e26a5f52ec2ab98b75b1abfad177cda
-
SHA256
74cbc88d1d2c35c9704bcae69937c81d52cafaf9fe100e533e3b41a211eb3cf0
-
SHA512
3351c1e472e16b119e0fbececcb5507ab22ce64f877f9790eeaba5e2547e318279abfbaae641cd72cc4578d6f6d3b64da77236261aaddfa77c271dbc2d39536b
-
SSDEEP
6144:PHmeQUlPuxS6bYSxF4pUUCD5E8C0zFsMm4VMFC8pWnZS/xP6q8DG37KC9N/:PJ6bYeTRdCB4VMFCQWnYJt7KC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf4dc7fe71e7917387fbdfabd7877769_JaffaCakes118
Files
-
cf4dc7fe71e7917387fbdfabd7877769_JaffaCakes118.exe windows:4 windows x86 arch:x86
2dbd0e06b29b9956f1b37881f914befa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ddraw
DirectDrawCreateEx
winmm
timeGetTime
kernel32
SetEndOfFile
GetTimeZoneInformation
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
ReadFile
CreateFileA
CompareStringA
LoadLibraryA
FreeLibrary
SetConsoleCtrlHandler
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
CompareStringW
SetEnvironmentVariableA
GetDriveTypeA
FindResourceA
LoadResource
SizeofResource
LockResource
GetModuleFileNameW
CopyFileW
ExitProcess
VirtualAlloc
GetTickCount
GetFullPathNameA
GetLastError
GetCurrentDirectoryA
SetStdHandle
GetStringTypeW
GetStringTypeA
Sleep
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
HeapAlloc
HeapFree
HeapReAlloc
RaiseException
RtlUnwind
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
GetProcAddress
GetModuleHandleA
GetACP
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
FatalAppExitA
VirtualFree
HeapDestroy
HeapCreate
WriteFile
GetStdHandle
GetModuleFileNameA
CloseHandle
SetHandleCount
GetFileType
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
GetLocaleInfoA
SetCurrentDirectoryA
user32
PeekMessageA
DefWindowProcA
PostQuitMessage
LoadImageA
GetDC
ReleaseDC
GetClientRect
ClientToScreen
DrawTextA
ShowWindow
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
GetSystemMetrics
GetWindowLongA
SendMessageA
GetMessageA
DispatchMessageA
TranslateMessage
UpdateWindow
gdi32
CreateCompatibleDC
DeleteDC
BitBlt
Polyline
Ellipse
CreatePen
CreateBrushIndirect
SelectObject
Rectangle
DeleteObject
SetBkMode
SetTextColor
GetStockObject
GetObjectA
advapi32
CryptAcquireContextA
shell32
ShellExecuteW
Sections
.text Size: 184KB - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 268KB - Virtual size: 266KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ