c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\obj-firefox\security\sandbox\win\wow_helper\wow_helper.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fe8c8af4687297b3f98b98d695b20c59_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fe8c8af4687297b3f98b98d695b20c59_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fe8c8af4687297b3f98b98d695b20c59_JaffaCakes118
-
Size
5.1MB
-
MD5
fe8c8af4687297b3f98b98d695b20c59
-
SHA1
06fac26b0946e03f425cf801d34ede788ce18053
-
SHA256
5eddd330ed35e3c0e276db61e7b008bc70d5513bf9d7e26babda92f856cb9873
-
SHA512
848013f585a3fc3f03bb02a3b2f5dba730622182177331ab25dd793fe6787dc03d8430c4b1dcb5f18f444116701b4ba14851a4fb382321c17d60e64ed0ea6b10
-
SSDEEP
49152:WlYvoGxUSJpXk5qMDHCbLfUOZqhaK6zbfqdlYPDkYOMwwnMb4PmyV9YDzxW:WsRXk5q7NxPgYOXwnS4rVSDFW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe8c8af4687297b3f98b98d695b20c59_JaffaCakes118
Files
-
fe8c8af4687297b3f98b98d695b20c59_JaffaCakes118.exe windows:5 windows x64 arch:x64
c9f967f67df866bbb218de1876856578
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
VirtualProtectEx
ReadProcessMemory
WriteProcessMemory
GetModuleHandleW
GetProcAddress
OpenProcess
EncodePointer
DecodePointer
GetCommandLineW
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
IsDebuggerPresent
IsProcessorFeaturePresent
GetLastError
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
HeapSize
GetStringTypeW
SetLastError
GetCurrentThreadId
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
LCMapStringW
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
HeapReAlloc
OutputDebugStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
CreateFileW
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.TargetC Size: 512B - Virtual size: 139B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ