C:\G\G.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e70595d1e2d9a242b313c700b2279c41_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e70595d1e2d9a242b313c700b2279c41_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e70595d1e2d9a242b313c700b2279c41_JaffaCakes118
-
Size
133KB
-
MD5
e70595d1e2d9a242b313c700b2279c41
-
SHA1
0caa6a68b2a70edf1b0116595284fa891b11aa4e
-
SHA256
05f9502ece7f6c33dac6c13a39a7eb16fce2c05f0a63302df810feba495a38bd
-
SHA512
0d150bffc685da2e4954f2b270d18803a8a6387c2501f3cde4c951945377f06fc81e6c52f1a50c5c2a7f55a7ae02ae20a83af4e31c445e5848456299af825abe
-
SSDEEP
3072:oHpOlnsIoD65dt5Ej3Yv9Z4I5/cBNdCLz2G:o/zUt63Yv92I5/cEiG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e70595d1e2d9a242b313c700b2279c41_JaffaCakes118
Files
-
e70595d1e2d9a242b313c700b2279c41_JaffaCakes118.exe windows:4 windows x86 arch:x86
85e9755a0aac59e2fc0e9053b3fe989a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ws2_32
htons
socket
connect
comctl32
ord14
kernel32
GetStringTypeW
GetLocaleInfoA
VirtualProtect
WriteFile
GetProcAddress
LoadLibraryA
LockResource
SizeofResource
LoadResource
FindResourceA
GetSystemTime
GetLastError
HeapReAlloc
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
IsBadWritePtr
ExitProcess
TerminateProcess
GetCurrentProcess
GetSystemInfo
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ