g:\Acro_root_nsd\BuildResults\bin\Release\AcroTextExtractor.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f66350297b3c54755ff81c7b2a638547_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f66350297b3c54755ff81c7b2a638547_JaffaCakes118
-
Size
101KB
-
MD5
f66350297b3c54755ff81c7b2a638547
-
SHA1
9246eecb08acd098177a3675af8f21a559fc6210
-
SHA256
2af1d835216c5884a7f1e99f200615b5ce120fbd50422b739bd7131c6010464a
-
SHA512
009146d4b3ad0324ea894b2aa20afe6c3028290e61577c4d5f13df47afc2fdee14e88388123975892302256ff820b971f92d90076422609fd763f1b04c395919
-
SSDEEP
1536:dav5yAvAOxmExB/RhuZ89GPPLDnZ12vf/zsH6SGJ6Py+O+fe5kMnzboOPI/Zs2QG:8syAOxmkqa0P3LIsHZGgPy+Nknzb3I35
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f66350297b3c54755ff81c7b2a638547_JaffaCakes118
Files
-
f66350297b3c54755ff81c7b2a638547_JaffaCakes118.exe windows:4 windows x86 arch:x86
5be514fe4dc84686086844a115d24797
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
query
LoadIFilter
kernel32
QueryPerformanceCounter
IsDebuggerPresent
GetTickCount
SetErrorMode
GetCommandLineW
GetVersionExW
WaitForMultipleObjects
OpenFileMappingW
MapViewOfFile
OpenEventW
UnmapViewOfFile
CloseHandle
SetEvent
ResetEvent
OpenProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
Sleep
InterlockedCompareExchange
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InterlockedExchange
ole32
CoUninitialize
CoInitialize
msvcp80
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1strstreambuf@std@@UAE@XZ
??0strstreambuf@std@@QAE@PBDH@Z
??0strstreambuf@std@@QAE@PADH0@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
?deallocate@?$allocator@D@std@@QAEXPADI@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?allocate@?$allocator@D@std@@QAEPADI@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
msvcr80
swscanf_s
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_crt_debugger_hook
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
??2@YAPAXI@Z
??3@YAXPAX@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
_CxxThrowException
_invalid_parameter_noinfo
__CxxFrameHandler3
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE