HRWR#%WRHW@#$$GBERNER.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d3822a8deb6ca82717b8cbbd4218e641_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d3822a8deb6ca82717b8cbbd4218e641_JaffaCakes118
-
Size
396KB
-
MD5
d3822a8deb6ca82717b8cbbd4218e641
-
SHA1
c7c2fe7a3d3845a1ed4856e75848d1b87d617a9a
-
SHA256
400b56c426f9a33eb9250c90f0000e474c64d088135f7a5a6d721e17f4121f6e
-
SHA512
76c2fb7dc362c36aed0e57f2c4cd2e02cbd934eadba6272ceeb119deb3a8bc99850685e63e121d27a1400ae02053f2d9eaddf58c775083bf0c658d872d6f38cc
-
SSDEEP
3072:HTuLDHO7KrklcdERNqDNG9ntxZcE6YB6cV9gDCyo04Nd7NryaD8QjJrH4Ab2ny6R:u7/olbRNqD0Tck6cV99DNryijFHnbc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3822a8deb6ca82717b8cbbd4218e641_JaffaCakes118
Files
-
d3822a8deb6ca82717b8cbbd4218e641_JaffaCakes118.exe windows:5 windows x86 arch:x86
02a9a5096fdf3e5fafb242310039e1fb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
oleaut32
VarTokenizeFormatString
winmm
midiOutUnprepareHeader
mixerMessage
ntdsapi
DsListSitesW
ole32
OleBuildVersion
CoCreateGuid
user32
EndDialog
pdh
PdhEnumObjectItemsW
shlwapi
PathIsDirectoryEmptyW
PathIsDirectoryA
iphlpapi
DeleteIpForwardEntry
advapi32
RegDisablePredefinedCache
AddAuditAccessAceEx
QueryUsersOnEncryptedFile
BackupEventLogW
msvfw32
DrawDibClose
kernel32
GetSystemPowerStatus
UnlockFileEx
GetLogicalProcessorInformation
GetACP
GetNumberFormatW
WriteFile
GetModuleHandleA
WriteConsoleOutputAttribute
ExitThread
GetVersionExW
gdi32
GetDCPenColor
SetTextAlign
GetTextCharsetInfo
GetAspectRatioFilterEx
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 292KB - Virtual size: 289KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.CRT Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ