C:\exe.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f6edaff9d0e2560396a9754a9f60c0b1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f6edaff9d0e2560396a9754a9f60c0b1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f6edaff9d0e2560396a9754a9f60c0b1_JaffaCakes118
-
Size
25KB
-
MD5
f6edaff9d0e2560396a9754a9f60c0b1
-
SHA1
c534baca537695fb9835239756d7ed46e5b38675
-
SHA256
7e2757908f83fa266801159a9a5e8950d074c62057d4c64b7a36a890f2ab5ca6
-
SHA512
b0c235fa5610e44ea437b115f97ccd081d9304a030964204bf509db4827edc9b478ac879efd07d90524c5a7b43750f9c640be451261ac6323eeaf5047994a7a9
-
SSDEEP
384:tsqLz6NwK+Zg1tDeMrOM2S30SuYANmNFyAalETdY5X4OSRx:+S9atnrOS3VLAUFralETdY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6edaff9d0e2560396a9754a9f60c0b1_JaffaCakes118
Files
-
f6edaff9d0e2560396a9754a9f60c0b1_JaffaCakes118.exe windows:5 windows x86 arch:x86
83369aba28a630ed7c71be0edbe972e4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
memcpy
_acmdln
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
memset
strcat
_exit
__getmainargs
_XcptFilter
_adjust_fdiv
__setusermatherr
_initterm
exit
shlwapi
PathFileExistsA
kernel32
GetStartupInfoA
GetTempPathA
CloseHandle
GetCurrentThreadId
GetModuleHandleA
LoadLibraryA
GetProcAddress
MultiByteToWideChar
SizeofResource
CreateFileA
FindResourceA
SetFilePointer
lstrlenA
SetEndOfFile
FreeLibrary
LoadResource
GlobalLock
SetFileTime
GetWindowsDirectoryA
WriteFile
user32
PostThreadMessageA
wsprintfA
GetInputState
GetMessageA
advapi32
ControlService
QueryServiceStatus
RegOpenKeyExA
RegCreateKeyExA
StartServiceA
CreateServiceA
RegQueryValueExA
RegSetValueExA
CloseServiceHandle
OpenServiceA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 396B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 486B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ