Pb730.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ecdbfa5fa4de3282c7e8d00f73617144_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ecdbfa5fa4de3282c7e8d00f73617144_JaffaCakes118
-
Size
156KB
-
MD5
ecdbfa5fa4de3282c7e8d00f73617144
-
SHA1
b7f428d79ffc76577a66d351631ead8fe63f73cd
-
SHA256
27d427aadee0e362b72f541f3e236b136bef133169c6d1d345f214e186ca147d
-
SHA512
c5bd8b9ecdca1c46c988678edac31f3b6ab80bd626021c0c7bfb601f1a63f294cd5da2bcf2900ba54bfc5eadce37ed02627861b3c8aace1a21aa4a51c6857027
-
SSDEEP
1536:lEW90SWuIuyvY7iIWij/vGrQzgcD0Vedw/BNugQBepnN8tquDsqFpUUlF1MGRoW6:OWGSBq6iIHiQz7AJ/OBeZiYGfFHiW6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ecdbfa5fa4de3282c7e8d00f73617144_JaffaCakes118
Files
-
ecdbfa5fa4de3282c7e8d00f73617144_JaffaCakes118.exe windows:5 windows x86 arch:x86
4cc38dd6a9be695213023ecfa6e62206
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
advapi32
AllocateLocallyUniqueId
LookupAccountSidA
oleaut32
VarUI2FromBool
kernel32
GetConsoleDisplayMode
GetCurrentThread
GetFileType
GetUserDefaultLCID
GetCommandLineW
OpenMutexA
GetConsoleFontSize
DosDateTimeToFileTime
WinExec
user32
AddClipboardFormatListener
DdeAddData
GetMenuInfo
IsClipboardFormatAvailable
CountClipboardFormats
GetClipboardSequenceNumber
DestroyCursor
LockSetForegroundWindow
CloseDesktop
GetMessageW
NotifyWinEvent
DdeGetData
gdi32
WidenPath
OffsetRgn
ColorCorrectPalette
GetViewportExtEx
urlmon
CopyStgMedium
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CONST Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Code Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ