C:\pomaviwek\fov\yafonij\fuz-guyocokiputij56-rucupimi\wa.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ec3f1269bb1442106d93361f7bde2b43_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ec3f1269bb1442106d93361f7bde2b43_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ec3f1269bb1442106d93361f7bde2b43_JaffaCakes118
-
Size
854KB
-
MD5
ec3f1269bb1442106d93361f7bde2b43
-
SHA1
3fe8e6d37aaac065c158bdd8f29b8d9598167dcb
-
SHA256
c8c90476499981166b84df46c15871b2cce74ab65d1e9a6d2dad660b06f80143
-
SHA512
96c2c62e0a864c6da1646ef4436b77b1e22cd7d5b1bb08d34d234d6d83c2f610c0d0d8b5f99d3f6821b3aa1c5c2cd72374cd7144bd6a87b10ddbb5fedfca9cc3
-
SSDEEP
24576:YIHbAiVDPXfiDrJBaWC8sTTmhi/Gw41YeI0bAiOe5dH:YoVDCJBsTyi+wRIp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec3f1269bb1442106d93361f7bde2b43_JaffaCakes118
Files
-
ec3f1269bb1442106d93361f7bde2b43_JaffaCakes118.exe windows:5 windows x86 arch:x86
42c24f8afa9a3219ec8f6552ac1f6be3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
CreateFileA
GetFileSize
SetFilePointer
lstrlenA
WritePrivateProfileStructA
CopyFileExW
TlsGetValue
SetLocalTime
GetDriveTypeW
CallNamedPipeA
SetUnhandledExceptionFilter
_lwrite
InterlockedDecrement
WritePrivateProfileSectionA
CreateDirectoryW
GlobalLock
GetProfileSectionA
WaitForSingleObject
SetComputerNameW
GetModuleHandleW
CreateNamedPipeW
ReadConsoleW
EnumTimeFormatsA
CreateActCtxW
CreateDirectoryExW
GetPriorityClass
GlobalAlloc
LoadLibraryW
GetConsoleMode
Sleep
ReadConsoleInputA
CopyFileW
_hread
SetVolumeMountPointA
IsProcessorFeaturePresent
Beep
SetConsoleCursorPosition
ReadFile
GetModuleFileNameW
GetBinaryTypeW
GetACP
SetConsoleTitleA
VerifyVersionInfoW
HeapReAlloc
SetThreadLocale
GetCPInfoExW
OpenMutexW
IsDBCSLeadByteEx
GetCurrentDirectoryW
ReadConsoleOutputCharacterA
GetProcAddress
GetProcessHeaps
GetComputerNameExW
CopyFileA
VerLanguageNameW
BuildCommDCBW
GetTempFileNameA
ResetEvent
OpenWaitableTimerA
GetAtomNameA
LocalAlloc
IsWow64Process
IsSystemResumeAutomatic
AddAtomW
SetCurrentDirectoryW
SetCommMask
GetPrivateProfileStructA
SetEnvironmentVariableA
WTSGetActiveConsoleSessionId
CreateIoCompletionPort
FreeEnvironmentStringsW
FindNextFileW
CompareStringA
SetCalendarInfoA
_lopen
OpenSemaphoreW
GetVersionExA
LocalSize
InterlockedPushEntrySList
TlsFree
LCMapStringW
GetVolumeInformationW
CloseHandle
CreateFileW
GetUserDefaultLCID
EnumSystemLocalesA
EnumResourceNamesW
GlobalUnfix
FillConsoleOutputCharacterA
InterlockedIncrement
EncodePointer
DecodePointer
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapValidate
IsBadReadPtr
GetLastError
DeleteFileA
GetCommandLineW
HeapSetInformation
GetStartupInfoW
RtlUnwind
RaiseException
WideCharToMultiByte
MultiByteToWideChar
GetCPInfo
ExitProcess
WriteFile
GetStdHandle
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetFileType
GetConsoleCP
HeapAlloc
GetModuleFileNameA
HeapSize
HeapQueryInformation
HeapFree
HeapCreate
GetOEMCP
IsValidCodePage
TlsAlloc
TlsSetValue
GetCurrentThreadId
SetLastError
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
SetHandleCount
GetLocaleInfoW
GetStringTypeW
GetLocaleInfoA
IsValidLocale
FlushFileBuffers
user32
GetCursorInfo
GetListBoxInfo
GetComboBoxInfo
GetMenuBarInfo
advapi32
IsTextUnicode
InitiateSystemShutdownW
Sections
.text Size: 761KB - Virtual size: 760KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ