C:\Users\Fly3110\source\repos\installer2_2017\Release\finder.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e222fc55c24029f41d7d6807a28182b5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e222fc55c24029f41d7d6807a28182b5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e222fc55c24029f41d7d6807a28182b5_JaffaCakes118
-
Size
937KB
-
MD5
e222fc55c24029f41d7d6807a28182b5
-
SHA1
2c0700ee28915562dd140f3a49e29ce1cb420608
-
SHA256
699df5beb67e8e42f540a9549c3b34ae910d1f0cba6ca227c16845c783cd5fc2
-
SHA512
2120d59b122995dc4d11ae630c0300cc60a55ae2e4dda194e7feaba335c1244d40d6e0f47dbeac6335ff5027a9ceed09ae517f4be13f9b5d310395b31e614d5c
-
SSDEEP
24576:VkfzYf+arlGAFrHApaVYKuEmEpKlXLlvAaPN9vlh7JvT/x:uiCpdK6jAaPN9vfJvT5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e222fc55c24029f41d7d6807a28182b5_JaffaCakes118
Files
-
e222fc55c24029f41d7d6807a28182b5_JaffaCakes118.exe windows:6 windows x86 arch:x86
274da76a86a3c09cb6c73afc9d599238
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
lstrcmpA
GetModuleHandleA
Sleep
CopyFileA
GetFileAttributesA
LockResource
GetWindowsDirectoryA
LoadResource
SetEvent
CloseHandle
ExitProcess
CreateEventA
GetLastError
GetVersionExA
GetNativeSystemInfo
AreFileApisANSI
ReadFile
TryEnterCriticalSection
HeapCreate
HeapFree
EnterCriticalSection
GetFullPathNameW
WriteFile
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
LeaveCriticalSection
InitializeCriticalSection
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
WaitForSingleObject
CreateFileW
GetFileAttributesW
GetCurrentThreadId
UnmapViewOfFile
HeapValidate
HeapSize
MultiByteToWideChar
FormatMessageW
GetDiskFreeSpaceA
GetFileAttributesExW
OutputDebugStringW
FindClose
CreateFileA
LoadLibraryA
WaitForSingleObjectEx
DeleteFileW
HeapReAlloc
GetSystemInfo
LoadLibraryW
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
GetProcAddress
LocalFree
LockFileEx
GetFileSize
DeleteCriticalSection
GetCurrentProcessId
GetProcessHeap
SystemTimeToFileTime
FreeLibrary
WideCharToMultiByte
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
FindResourceA
FindNextFileA
FindFirstFileA
SizeofResource
GetModuleFileNameA
DeleteFileA
GetThreadTimes
FlushViewOfFile
GetTempPathA
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EncodePointer
DecodePointer
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
ResetEvent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
LCMapStringA
GetUserDefaultLCID
GetStringTypeExA
RtlUnwind
RaiseException
LoadLibraryExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetStdHandle
GetACP
GetCurrentThread
GetFileType
GetConsoleCP
GetConsoleMode
IsValidLocale
EnumSystemLocalesW
SetFilePointerEx
GetTimeZoneInformation
FindFirstFileExA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
MoveFileExW
ReadConsoleW
WriteConsoleW
advapi32
RegSetValueExA
RegCloseKey
RegGetValueA
RegCreateKeyExA
RegOpenKeyExA
shell32
ShellExecuteExA
rpcrt4
UuidCreate
UuidToStringA
urlmon
URLDownloadToFileA
wininet
HttpQueryInfoA
InternetOpenA
InternetCloseHandle
HttpSendRequestA
InternetReadFile
InternetSetOptionA
HttpOpenRequestA
InternetConnectA
crypt32
CryptUnprotectData
user32
LoadStringA
Sections
.text Size: 733KB - Virtual size: 733KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 155KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ