rtjheWRJKeyWY@#yhJtrjER.pdb
Static task
static1
Behavioral task
behavioral1
Sample
eb7b9880c5bca3e54858a9f328468ded_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
eb7b9880c5bca3e54858a9f328468ded_JaffaCakes118
-
Size
132KB
-
MD5
eb7b9880c5bca3e54858a9f328468ded
-
SHA1
f584affae1250cc172b7c4d255bc741e65da1587
-
SHA256
f9409b8b773b89035f9e8075b0e72ceabc934d17835c5622cb45da20bb2cb644
-
SHA512
deac80627396e3bedb35748094236ebd78a0def9b822f9c6b525a04b40733e586b1826fe247daa21b11f0205af4fb1742850cedaadc0d9815e3fe99440e65170
-
SSDEEP
1536:/xGwBj6girRA51ezsqHqpiPNR780sB6mimlS8dJB:fBrv51dBa4Mfq5T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb7b9880c5bca3e54858a9f328468ded_JaffaCakes118
Files
-
eb7b9880c5bca3e54858a9f328468ded_JaffaCakes118.exe windows:5 windows x86 arch:x86
8f922e04ad4952c704cbf11255b685be
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
wininet
InternetConfirmZoneCrossing
lz32
LZSeek
kernel32
SetThreadUILanguage
DebugBreak
lstrlenA
FreeConsole
user32
EqualRect
advapi32
GetSecurityDescriptorLength
CryptCreateHash
wintrust
CryptCATAdminCalcHashFromFileHandle
gdi32
GetBoundsRect
GetPath
DeleteDC
BeginPath
GetTextCharsetInfo
SetPixelV
FrameRgn
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qdata Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ