r.4YM4qhCz5DavnCoPhjjx.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f22991d721215b8eebde89f914350b01_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
f22991d721215b8eebde89f914350b01_JaffaCakes118
-
Size
512KB
-
MD5
f22991d721215b8eebde89f914350b01
-
SHA1
f2a2f033728dd05bf63b3cc1eb3a18ad9ae9d89d
-
SHA256
68d27ee84a09414459cbd880214ddcfdf5a48f36ebe8d6b79389ac9a56a6836b
-
SHA512
a40c4808e23d52caa8f30770b07a6fc22e5481fd4676c7945253ab2cb15c17fcef9562dd5f91871b2effe6249157b5c52c010ecd62d933540a3215882198b0ed
-
SSDEEP
3072:+2EqQmkj+lfkSyupOW83mobfd0Wax0uIiMg/B86nJN3:+2EqQmk0fkowW8eAg/BvnJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f22991d721215b8eebde89f914350b01_JaffaCakes118
Files
-
f22991d721215b8eebde89f914350b01_JaffaCakes118.exe windows:5 windows x86 arch:x86
ff3cc92ffc52abbab84c236b30c12b3f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
avifil32
AVIFileGetStream
cfgmgr32
CM_Get_Next_Log_Conf
netapi32
NetLocalGroupAddMembers
gdi32
FillRgn
GetCharWidth32A
GetClipRgn
Rectangle
GetCharacterPlacementA
msvcrt
malloc
fputc
advapi32
FileEncryptionStatusW
DeregisterEventSource
winmm
timeGetTime
winscard
SCardListReadersA
winspool.drv
FindFirstPrinterChangeNotification
GetPrintProcessorDirectoryW
lz32
LZSeek
kernel32
GetTickCount
GetNamedPipeClientProcessId
GetUserDefaultLangID
GetCurrentProcess
GetModuleHandleA
GetSystemWindowsDirectoryW
FreeEnvironmentStringsW
GetDiskFreeSpaceA
SetMailslotInfo
GetFileTime
GetConsoleWindow
GetVolumeInformationW
FillConsoleOutputAttribute
GetTimeFormatW
GetSystemPowerStatus
WriteProcessMemory
GetPrivateProfileStringW
user32
CallMsgFilterA
DrawStateA
DrawFrameControl
GetDlgItemInt
GetProcessWindowStation
GetCursorInfo
Sections
.text Size: 484KB - Virtual size: 481KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ