gggGe\fG||/GWw1Ge3G.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ea9eeb237f642b9c7a265fde67452349_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
ea9eeb237f642b9c7a265fde67452349_JaffaCakes118
-
Size
108KB
-
MD5
ea9eeb237f642b9c7a265fde67452349
-
SHA1
f25ab8b50273646c451eb1807f81150b6fc2f37e
-
SHA256
9c313a5b8642d69cf482cad18467d495a78c1a1fee00facd5a1a075e4f041493
-
SHA512
1f7808ef78c1965d373b7b440fdb5a3bdd1b747496a3d272645bb3d1799ec7d2c22d03f820bad93ddde998d113ac0f2ef0a82a4a00759fe3992c19d035243d01
-
SSDEEP
1536:PKcOXabMoQOv/TdSJZdNWq9MoRZNs2sgN2YofCAoYQEwDxuIc5:PKcQloz/Td+dNWGMiZNs2sgMI8wDve
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea9eeb237f642b9c7a265fde67452349_JaffaCakes118
Files
-
ea9eeb237f642b9c7a265fde67452349_JaffaCakes118.exe windows:5 windows x86 arch:x86
531b539f1b9ae9602caae75627e3b698
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
SetClipboardViewer
GetFocus
kernel32
GetProcessTimes
ActivateActCtx
GetProcessHeap
SwitchToThread
FlsFree
setupapi
CM_Get_DevNode_Status
ws2_32
WSACleanup
inet_addr
esent
JetInit2
rpcrt4
I_RpcServerRegisterForwardFunction
RpcBindingInqAuthClientExW
NdrClearOutParameters
netapi32
NetShareGetInfo
NetApiBufferFree
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.CRt1 Size: 2KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ