c:\Work\Alex\Applet Game from CD\Release\setup.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f6b4249f53e499d4f34ed0566a211ddb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f6b4249f53e499d4f34ed0566a211ddb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f6b4249f53e499d4f34ed0566a211ddb_JaffaCakes118
-
Size
100KB
-
MD5
f6b4249f53e499d4f34ed0566a211ddb
-
SHA1
b3786b8dc33eaf52ace953f01720c4667305da0b
-
SHA256
07de397fc4a28a9eeec67fb5ee82cf2dfb31f59440af67c26e72ebb2d3c894bb
-
SHA512
fa21f078bfb332e9583d614a98339f44e4e34c1434ec63d701ad41c018b9c3226a29baf204c0b842e9503026478246da2838371c418b4057294109d46f2ecb09
-
SSDEEP
768:chC3O4DCDUxfNeEg34iLlgEJSw05hziuEGlCj7qZU9qZU9XFEtc:E4X6Eg34iLSE+Llc7qpKEa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6b4249f53e499d4f34ed0566a211ddb_JaffaCakes118
Files
-
f6b4249f53e499d4f34ed0566a211ddb_JaffaCakes118.exe windows:4 windows x86 arch:x86
0e19879c2091d2f12b97bcc2f01fc7bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GlobalReAlloc
GetTempPathA
GlobalAlloc
WriteFile
CloseHandle
GetFileType
CreateFileA
GlobalFree
ReadFile
SetFilePointer
GetFileSize
CreateProcessA
lstrlenA
ExitProcess
DeleteFileA
GetExitCodeProcess
Sleep
lstrcmpA
GetCommandLineA
GetVersionExA
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
GetSystemInfo
VirtualProtect
HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
GetModuleHandleA
GetStartupInfoA
TlsAlloc
SetLastError
GetCurrentThreadId
GetLastError
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
user32
wsprintfA
shell32
ShellExecuteExA
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ