proxycfg.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ff0ca36dc163ef5b6f6308dc3e6d6aad_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ff0ca36dc163ef5b6f6308dc3e6d6aad_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ff0ca36dc163ef5b6f6308dc3e6d6aad_JaffaCakes118
-
Size
13KB
-
MD5
ff0ca36dc163ef5b6f6308dc3e6d6aad
-
SHA1
17c744f231415fdd16679e682793c5f6a7066ef6
-
SHA256
55d07c0ffe58425815534ffaf200723b2295ea0028146128b618ef580cdc0b8d
-
SHA512
edc079cc0c3f7708163fe13066d877f39f349a9fdb77e38684f7e00740233c9f1a786d292fb8da4daa612151e6c04ea47650ddfbafc8a333bc6b4227a9c2a921
-
SSDEEP
384:eBPuBthTop+2dpF8Ww8d3qoobpSQzURK:eOhQ+6FLVxdQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff0ca36dc163ef5b6f6308dc3e6d6aad_JaffaCakes118
Files
-
ff0ca36dc163ef5b6f6308dc3e6d6aad_JaffaCakes118.exe windows:5 windows x86 arch:x86
a27d83a9da2c352a78f464a9a6e77955
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
__getmainargs
__initenv
_cexit
_XcptFilter
_exit
_c_exit
exit
tolower
_initterm
wcslen
??2@YAPAXI@Z
??3@YAXPAX@Z
kernel32
FreeLibrary
LoadLibraryExA
WriteFile
GetModuleHandleA
GlobalFree
LocalFree
GetLastError
lstrlenA
MultiByteToWideChar
GetStdHandle
GetFileType
GetConsoleMode
WriteConsoleW
GetConsoleOutputCP
WideCharToMultiByte
FormatMessageW
wininet
InternetQueryOptionA
winhttp
WinHttpGetDefaultProxyConfiguration
WinHttpSetDefaultProxyConfiguration
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 32B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ