rasman.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d393d2de033206fb1e51db709112e56e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d393d2de033206fb1e51db709112e56e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d393d2de033206fb1e51db709112e56e_JaffaCakes118
-
Size
315KB
-
MD5
d393d2de033206fb1e51db709112e56e
-
SHA1
ce40cb43ed42685789aec386093f47da4c93d20e
-
SHA256
460a5567afdba16be0d8c313d67c67e1012088efc3d7ba47ae17c01ab4fb31f4
-
SHA512
c7f2c21a0e6695a7f8c1364c439a772d284c6bbe4827e04b1d31729f34c0046320d7bcddb2fb0b4b2aad5d8f1823b69fe5eb21fa2cbe6299e3ba6a35efa014fd
-
SSDEEP
6144:aPdVvadAgLst1SOtzPSQ9l+pzlwlMQFA3Y:LRAt1u9o1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d393d2de033206fb1e51db709112e56e_JaffaCakes118
Files
-
d393d2de033206fb1e51db709112e56e_JaffaCakes118.exe windows:5 windows x86 arch:x86
42c649866669e4580bce3cb6dbdbeaa3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcpynW
lstrlenW
lstrcmpiW
ExitProcess
GetModuleHandleA
GetStartupInfoW
GetCommandLineW
ExpandEnvironmentStringsW
lstrcpyW
advapi32
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegCreateKeyA
RegOpenKeyA
RegFlushKey
user32
MapDialogRect
SetRect
CreateWindowExW
PostMessageW
DestroyIcon
CheckRadioButton
IsDlgButtonChecked
GetSysColor
IsWindowVisible
GetDialogBaseUnits
GetFocus
UpdateWindow
GetNextDlgTabItem
GetClientRect
DrawFocusRect
LoadCursorA
SetCursor
GetWindowRect
MapWindowPoints
FillRect
InvalidateRect
GetSysColorBrush
LoadBitmapW
GetDesktopWindow
LoadStringA
SendDlgItemMessageA
SetDlgItemTextW
SendMessageA
SetWindowTextA
GetDC
ReleaseDC
WinHelpW
ShowWindow
GetDlgItem
GetWindowTextW
EnableWindow
SetFocus
DialogBoxParamW
PeekMessageA
IsWindowEnabled
LoadIconA
GetUpdateRect
CallWindowProcA
BeginPaint
EndPaint
DrawIcon
wsprintfA
SetWindowPos
GetParent
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
GetDlgItemTextA
SetClassLongA
GetWindowLongA
MonitorFromWindow
GetMonitorInfoW
GetWindow
CopyRect
LoadCursorW
DestroyWindow
SystemParametersInfoA
MessageBoxExW
PostMessageA
RegisterClipboardFormatA
CreateWindowExA
MoveWindow
GetWindowDC
SetCapture
SetWindowLongA
ReleaseCapture
GetWindowLongW
DrawTextExW
SendDlgItemMessageW
EndDialog
SetWindowLongW
SetWindowTextW
SendMessageW
LoadStringW
MessageBoxW
ntdll
RtlAnsiStringToUnicodeString
RtlInitUnicodeString
RtlOemToUnicodeN
NtOpenThreadToken
NtImpersonateAnonymousToken
NtCreateFile
NtFsControlFile
NtSetInformationThread
RtlUnicodeToOemN
NlsMbOemCodePageTag
RtlxUnicodeStringToOemSize
RtlUnicodeStringToOemString
NtOpenProcessToken
NtQueryInformationToken
RtlCopyLuid
NtClose
RtlAllocateHeap
RtlFreeHeap
RtlInitAnsiString
RtlUnicodeStringToAnsiString
RtlFreeUnicodeString
RtlNtStatusToDosError
RtlUnicodeToMultiByteN
ole32
CLSIDFromString
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoTaskMemFree
ReleaseStgMedium
CoCreateInstance
msvcrt
_purecall
malloc
_initterm
memcpy
free
memset
_onexit
__dllonexit
_adjust_fdiv
_itow
realloc
Sections
.text Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 199KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ