C:\duyekag74-sarojuholitosoc90\jip32_labitosa85 vecuwivujuruta.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d449078802a5330cc5553e49482a98ee_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d449078802a5330cc5553e49482a98ee_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d449078802a5330cc5553e49482a98ee_JaffaCakes118
-
Size
3.6MB
-
MD5
d449078802a5330cc5553e49482a98ee
-
SHA1
3e6e62739a014a3711b17faa37ac729cb1d085c8
-
SHA256
38afc38b92ce46bef4b9f01b0c5103d119c3dbd5c0072520c6263ef2435e176b
-
SHA512
5f6fe11dd26e05fc4d8ab31e372b0ab2d54b20d1b3ab2be7459c3a9654c9ed6e749f58448411b9e17878ce0c7c3c098b1f24f0401ed8d2b7393910f1454897c2
-
SSDEEP
98304:dP0J3uD+qjebjib0i5EBi3QG+vlWoqQgS:ds96ie0i5EBiQlq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d449078802a5330cc5553e49482a98ee_JaffaCakes118
Files
-
d449078802a5330cc5553e49482a98ee_JaffaCakes118.exe windows:5 windows x86 arch:x86
bf2c04dd6e449ccfad46c772826596d5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetSystemDefaultLCID
GetModuleHandleW
lstrcatA
lstrlenW
WritePrivateProfileStringW
SetComputerNameW
GetLastError
GetProcAddress
RegisterWaitForSingleObjectEx
GetTapeParameters
DebugBreakProcess
GetTempPathA
GlobalLock
CompareFileTime
HeapAlloc
LoadResource
GetLocaleInfoA
FindFirstFileExA
UnregisterWait
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
GetStringTypeW
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
GetCommandLineW
HeapSetInformation
GetStartupInfoW
GetCPInfo
RaiseException
RtlUnwind
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoW
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
HeapReAlloc
LoadLibraryW
advapi32
RegDeleteValueW
Sections
.text Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 75KB - Virtual size: 41.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ