C:\Work\Centre.pdb
Static task
static1
Behavioral task
behavioral1
Sample
00115d494aa5c8938625f8be6f360fb0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
00115d494aa5c8938625f8be6f360fb0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
00115d494aa5c8938625f8be6f360fb0_JaffaCakes118
-
Size
250KB
-
MD5
00115d494aa5c8938625f8be6f360fb0
-
SHA1
d823d7a935ba78e4e28403757092b20c163f553b
-
SHA256
a83188c0dc367efdf90a62023d1894a49e25462d600b939ba282432442d5a5da
-
SHA512
ee42b209095ee174750d812bcd2d9f3deae56b8e8d7082c75a7e6be952613c083ba761f5be68805c3dd937b9171088c83d663a7b7b788aa98eba5f7658852eb2
-
SSDEEP
6144:f9vKmScOyAXdnunxJQNmYr4s/YsAQ/kQrBGsh:fPgyAXdn2nQNmLjsj/trBXh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00115d494aa5c8938625f8be6f360fb0_JaffaCakes118
Files
-
00115d494aa5c8938625f8be6f360fb0_JaffaCakes118.exe windows:7 windows x86 arch:x86
521f8627be5a74ceb52483e1a8e2387c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
PathIsSameRootW
PathGetDriveNumberW
StrStrW
UrlGetPartA
StrToIntW
PathMakePrettyW
PathIsRootA
StrPBrkW
PathIsPrefixW
StrRChrW
StrStrIA
kernel32
lstrcatA
user32
IsCharAlphaA
IsMenu
IsCharLowerA
GetActiveWindow
GetCaretPos
GetClassLongA
Exports
Exports
?LormDelete@@YGXUverifyEw@CA7
?LormSelect@@YGXUverifyEw@CA7
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.one Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.null Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.void Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zero Size: 1024B - Virtual size: 972B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 128KB - Virtual size: 322KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ