C:\exe.pdb
Static task
static1
Behavioral task
behavioral1
Sample
db2c55df0829d39f05922606bc992647_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db2c55df0829d39f05922606bc992647_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
db2c55df0829d39f05922606bc992647_JaffaCakes118
-
Size
25KB
-
MD5
db2c55df0829d39f05922606bc992647
-
SHA1
9571e959164ebe7460ca6d996dade2c9c7956dbe
-
SHA256
18f75ad24fb09137552d0a646fd381bd6da33bc883433e0260e68e1f1b3ff4a1
-
SHA512
82229efbc46c2eceaba3f8f25b4bbe1da92107367439788030f02dbe66f20281f4038ccbb9083d38a4794a76d7ac6af52f604549a156804607efac6e0ac9d187
-
SSDEEP
384:7FYPCm11GMaMzFO2wc9bHioAaqMTp/KBPmHBW29/0o:7FjmrGwlwcg1aqMTp/J1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db2c55df0829d39f05922606bc992647_JaffaCakes118
Files
-
db2c55df0829d39f05922606bc992647_JaffaCakes118.exe windows:5 windows x86 arch:x86
beac13a611ecbb2ea1b6df131aef9c41
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
memcpy
_acmdln
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
strlen
memset
_exit
__getmainargs
_XcptFilter
_adjust_fdiv
__setusermatherr
_initterm
exit
shlwapi
PathFileExistsA
kernel32
GetStartupInfoA
GetTempPathA
CloseHandle
GetCurrentThreadId
GetModuleHandleA
LoadLibraryA
GetProcAddress
MultiByteToWideChar
SizeofResource
CreateFileA
SetFilePointer
lstrlenA
SetEndOfFile
FindResourceW
FreeLibrary
LoadResource
GlobalLock
SetFileTime
GetWindowsDirectoryA
WriteFile
user32
PostThreadMessageA
wsprintfA
GetInputState
GetMessageA
advapi32
ControlService
QueryServiceStatus
RegOpenKeyExA
RegCreateKeyExA
StartServiceA
CreateServiceA
RegQueryValueExA
RegSetValueExA
CloseServiceHandle
OpenServiceA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 396B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 474B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ