H:\EFjaEB.pdb
Static task
static1
Behavioral task
behavioral1
Sample
038dbde90384da666fb4eba2ca6d9936_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
038dbde90384da666fb4eba2ca6d9936_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
038dbde90384da666fb4eba2ca6d9936_JaffaCakes118
-
Size
187KB
-
MD5
038dbde90384da666fb4eba2ca6d9936
-
SHA1
3b0a7a2675008c86d7d9da082e52b0ea5b54d015
-
SHA256
a53deb170329491c9558a161dae0f4494f17a8991ed59ec8c9925de3b4db07d9
-
SHA512
26e5c811897d43b1a5fb0cc356de084b7d6613aae62fdd43d4f6df22c2a6bd8e2b7793f0f181b66231d8d446b9c2e6212c064a6b5d3f16e8dda80e869e3dc987
-
SSDEEP
3072:q0z/XVaHcmWL3SY8TFBr/uQky0yMU8zofUI7MNRUUJjGRd9ZWL38eYn/IDJggnYJ:3XV7kFJX0yFtfqNRUUGlZe389IDdYJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 038dbde90384da666fb4eba2ca6d9936_JaffaCakes118
Files
-
038dbde90384da666fb4eba2ca6d9936_JaffaCakes118.exe windows:5 windows x86 arch:x86
22f10dffe4af39f9fc1fd4e14260fc9b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetTickCount
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetLastError
HeapFree
HeapReAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
HeapCreate
HeapAlloc
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
LoadLibraryW
RtlUnwind
SetStdHandle
WriteConsoleW
MultiByteToWideChar
LCMapStringW
GetStringTypeW
IsProcessorFeaturePresent
HeapSize
CreateFileW
CloseHandle
FlushFileBuffers
user32
wvsprintfA
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 142KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ