6grehgqeHJE@!#@YJwr.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e36fa261697b3d09989d9f37b4eaf7b8_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
e36fa261697b3d09989d9f37b4eaf7b8_JaffaCakes118
-
Size
168KB
-
MD5
e36fa261697b3d09989d9f37b4eaf7b8
-
SHA1
f24520d28abf7755e13c11595be4d2875e7b1e8a
-
SHA256
7ff74dfe2aea2073e698eb489a20ef687450dfce2a9b87fb588a5e9314ceeee0
-
SHA512
7796c4dae8d81a86b6a3c36c4fd4fc15ba29b47ca675ab4eef55b5d76dd31f2a7c8458b43cadb2acb6191fb433090eb7203607cd3ce04e35add899492f3368d6
-
SSDEEP
3072:AOcwqx2eHI6ptwmAm/TnxZ7xZ2sz0CXmA/:AOheHI6ptwvOTxFHACd/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e36fa261697b3d09989d9f37b4eaf7b8_JaffaCakes118
Files
-
e36fa261697b3d09989d9f37b4eaf7b8_JaffaCakes118.exe windows:6 windows x86 arch:x86
d11c4f644fef9e338f22566c28583065
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
GetKeyboardLayoutList
GetTabbedTextExtentW
DrawTextExA
GetMenuBarInfo
GetClipboardViewer
GetCursorPos
IsCharLowerW
kernel32
GetConsoleHistoryInfo
lstrcmpW
GetCommConfig
GetBinaryTypeW
GetUserDefaultUILanguage
LocalHandle
DeleteVolumeMountPointW
GetLargestConsoleWindowSize
FindFirstVolumeMountPointW
GetFileSize
FindResourceExA
FormatMessageW
LocalLock
winscard
SCardGetProviderIdA
msvcrt
ungetwc
fwprintf
gdi32
GetTextCharset
winspool.drv
DeletePrinterDriverExW
advapi32
LookupAccountSidW
InitiateSystemShutdownA
EnumServicesStatusExW
secur32
FreeContextBuffer
Sections
.text Size: 148KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ