C:\inetpub\Temp\pr3jkr75pl4p629r19sqerchn4\Stub.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d728109230f4a164a6e8c49deab2b4e4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d728109230f4a164a6e8c49deab2b4e4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d728109230f4a164a6e8c49deab2b4e4_JaffaCakes118
-
Size
224KB
-
MD5
d728109230f4a164a6e8c49deab2b4e4
-
SHA1
9930a746a4ee18c4b445661efa3765721f671670
-
SHA256
e7a5e12a3bd27f448d0b1d3e34b8e352116b7a276b7c63cf4a80ea5d076dadb7
-
SHA512
324dd2fafe6eb6dc218364abd28a7e47660696c023c8b8fda0cccdcf60f100f5e70c40825cf779abba35dfcdaed566bcb7a816832a5418afd11191de45fe73c9
-
SSDEEP
6144:OVVxUI78g2w0y/W86CMRaz2Je9Zt8AQihy2:OVQIg7w038Rz2oDt8Alhy2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d728109230f4a164a6e8c49deab2b4e4_JaffaCakes118
Files
-
d728109230f4a164a6e8c49deab2b4e4_JaffaCakes118.exe windows:4 windows x86 arch:x86
69e4b96b8391f404f50a0477c47930de
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_endthreadex
??2@YAPAXI@Z
??3@YAXPAX@Z
memcpy
kernel32
VirtualAllocEx
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetLastError
GetStartupInfoA
CreateProcessA
FindResourceExA
GetCommandLineA
GetCurrentThread
SetThreadContext
FindResourceA
GetThreadContext
ResumeThread
WriteProcessMemory
GetModuleHandleA
LockResource
GetProcAddress
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 200KB - Virtual size: 199KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 542B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ