c:\work\Fport2\Release\Fport2.pdb
Static task
static1
Behavioral task
behavioral1
Sample
dbb75488aa2fa22ba6950aead1ef30d5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
dbb75488aa2fa22ba6950aead1ef30d5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dbb75488aa2fa22ba6950aead1ef30d5_JaffaCakes118
-
Size
112KB
-
MD5
dbb75488aa2fa22ba6950aead1ef30d5
-
SHA1
29d2e3c3a9c81274539f7dee65c337ce37f90202
-
SHA256
143882bc3be0b43a52ea178489ad9eec46212e43887e79b32d8f71def4b65139
-
SHA512
026da79625873e340acee876b71c7c059cc8aa6265f1e36c29594537bf5e460cbef2c9c6a20e8f47b16b6e802e661a36c24a026fffa750107c240873fa63547d
-
SSDEEP
1536:ljuCTX6fxpZL6MGLutrfoHJBnjoU7qhz9SCZ9qMWyF5Q12hmqf77Y3kbqiP0m:Vwxp8aQbDWZ4MWyF5jzmYqiP0m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbb75488aa2fa22ba6950aead1ef30d5_JaffaCakes118
Files
-
dbb75488aa2fa22ba6950aead1ef30d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
d5e297b3f5b319ff621e0f7c5759cb81
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ntdll
RtlUnwind
_chkstk
memchr
strcspn
sprintf
ZwQuerySystemInformation
ZwOpenFile
RtlInitUnicodeString
ZwOpenSection
memmove
psapi
EnumProcessModules
GetModuleBaseNameA
ws2_32
ntohs
kernel32
GetLocaleInfoW
LCMapStringW
LCMapStringA
ReadFile
SetStdHandle
VirtualQuery
GetSystemInfo
VirtualProtect
GetOEMCP
GetACP
GetProcAddress
GetVersionExA
FreeLibrary
MapViewOfFile
CloseHandle
UnmapViewOfFile
DuplicateHandle
GetCurrentProcess
OpenProcess
GetLastError
DeviceIoControl
CreateEventA
HeapFree
GetProcessHeap
GetCurrentProcessId
LoadLibraryA
HeapReAlloc
ExitProcess
RaiseException
GetModuleHandleA
GetCommandLineA
HeapAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
GetModuleFileNameA
SetUnhandledExceptionFilter
TerminateProcess
HeapSize
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetCPInfo
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
SetFilePointer
FlushFileBuffers
IsBadReadPtr
IsBadCodePtr
advapi32
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
Sections
.text Size: 88KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE