C:\exe.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d5b8dbb09da2fc9040fba61f844d1b6e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d5b8dbb09da2fc9040fba61f844d1b6e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d5b8dbb09da2fc9040fba61f844d1b6e_JaffaCakes118
-
Size
25KB
-
MD5
d5b8dbb09da2fc9040fba61f844d1b6e
-
SHA1
3e7dce0568fd937dd3afd6396dc54ca51815742f
-
SHA256
249c17e34ed533e2f42242de2bb496ff94dc448d9d77c50047e3f35545b271f4
-
SHA512
cbf8839624abcbc88ca604fc81509b1f83a04429266339651c5c824620196885eb7d0727ba3d612ebe49ff0db6e4f6a9779081e75acf7277acb8ac646267f97c
-
SSDEEP
384:9uWWBkTV5DH1tbuBWepkJMtEGqFxxAaK8Tg8uu1x0BVdcz:0WtTDVtIWTJM2GqFxGaK8TgmxwCz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5b8dbb09da2fc9040fba61f844d1b6e_JaffaCakes118
Files
-
d5b8dbb09da2fc9040fba61f844d1b6e_JaffaCakes118.exe windows:5 windows x86 arch:x86
83369aba28a630ed7c71be0edbe972e4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
memcpy
_acmdln
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
memset
strcat
_exit
__getmainargs
_XcptFilter
_adjust_fdiv
__setusermatherr
_initterm
exit
shlwapi
PathFileExistsA
kernel32
GetStartupInfoA
GetTempPathA
CloseHandle
GetCurrentThreadId
GetModuleHandleA
LoadLibraryA
GetProcAddress
MultiByteToWideChar
SizeofResource
CreateFileA
FindResourceA
SetFilePointer
lstrlenA
SetEndOfFile
FreeLibrary
LoadResource
GlobalLock
SetFileTime
GetWindowsDirectoryA
WriteFile
user32
PostThreadMessageA
wsprintfA
GetInputState
GetMessageA
advapi32
ControlService
QueryServiceStatus
RegOpenKeyExA
RegCreateKeyExA
StartServiceA
CreateServiceA
RegQueryValueExA
RegSetValueExA
CloseServiceHandle
OpenServiceA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 396B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ