*#qyY=gePuf8ds5YOX5n|AhOEyeJQ.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f6d965b6b10218ad45cd93b7c997e076_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f6d965b6b10218ad45cd93b7c997e076_JaffaCakes118
-
Size
136KB
-
MD5
f6d965b6b10218ad45cd93b7c997e076
-
SHA1
d12802a123b241d383dd5d60b8613d61ba6dfe4c
-
SHA256
f10ed0e6c4cd34c806732ce081faa8323077965d1ba8784b3a3560a85d3d3034
-
SHA512
3fd4f36e4f7ae4b20185df02ba5685316228cbb1524938d115a6d3151d5848f2c3f95a33e8b2f04a5d77990f9bb6350068e82d1b02c387f144988536fff16cc2
-
SSDEEP
3072:BmhGZrdXiX5Adn8x1mf7R+iHVEnsKqRru/KK/a8ceFMzr0fA:BmCrhKcnk1w8suJ/a8cnr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6d965b6b10218ad45cd93b7c997e076_JaffaCakes118
Files
-
f6d965b6b10218ad45cd93b7c997e076_JaffaCakes118.exe windows:6 windows x86 arch:x86
7b371c49ca2938db872632b56d356fc2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
winspool.drv
DeletePrinterDriverExW
winmm
mixerGetDevCapsW
esent
JetRetrieveColumn
user32
SwitchToThisWindow
HideCaret
GetMenuContextHelpId
GetDesktopWindow
CloseWindowStation
InsertMenuA
MapDialogRect
kernel32
GetVolumePathNameW
GetLocalTime
GetCommandLineW
GetCommState
IsValidLocaleName
FreeLibraryAndExitThread
LocalReAlloc
CloseHandle
SetProcessWorkingSetSize
DeleteTimerQueueEx
SetNamedPipeHandleState
GetProfileSectionW
advapi32
LockServiceDatabase
oleaut32
VarCyFromI1
VarCyFromR8
VarCyCmpR8
shlwapi
SHAutoComplete
rasapi32
RasGetAutodialAddressA
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 104KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ