D:\PROJECTS\CT\ProjectA\bin\Release\AClient.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ddc1f0309dff98e3792ea655cdbedef5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ddc1f0309dff98e3792ea655cdbedef5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ddc1f0309dff98e3792ea655cdbedef5_JaffaCakes118
-
Size
913KB
-
MD5
ddc1f0309dff98e3792ea655cdbedef5
-
SHA1
ccc1e154bc1b16031401589deddde99605d5549d
-
SHA256
4e353f5be62973fa20a7e150363876e44a1a2a707e67891542c21ed738bd7e7a
-
SHA512
44cb1e548ed7a4b5e3a362159f5a2fb0c462a8d112328b9a52d8bb6661f4e4736077dd6e53a3dcce2839afdc3dfd87166f161241424c610e584591246e2ef16e
-
SSDEEP
24576:nIqgDCtHQrrD17zoCN7DsRu+gaKav1+WhF:n6mtH0h7z5NfSgabAK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddc1f0309dff98e3792ea655cdbedef5_JaffaCakes118
Files
-
ddc1f0309dff98e3792ea655cdbedef5_JaffaCakes118.exe windows:5 windows x86 arch:x86
f3a176a721779ffe42dcc1d9017c5113
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
DestroyIcon
gdi32
CreateRectRgn
msimg32
AlphaBlend
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
advapi32
CryptDecrypt
shell32
SHBrowseForFolderW
comctl32
ImageList_GetIconSize
shlwapi
PathIsUNCW
ole32
RevokeDragDrop
oleaut32
VariantCopy
oledlg
OleUIBusyW
gdiplus
GdiplusShutdown
psapi
GetProcessMemoryInfo
ws2_32
socket
oleacc
AccessibleObjectFromWindow
imm32
ImmReleaseContext
winmm
PlaySoundW
dbghelp
MiniDumpWriteDump
iphlpapi
GetAdaptersInfo
netapi32
Netbios
version
GetFileVersionInfoA
Sections
.text Size: 874KB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE