e:\Projects\VDRun\Release\vd.pdb
Static task
static1
Behavioral task
behavioral1
Sample
066a1f429a42db429ccb9f86bf125cd4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
066a1f429a42db429ccb9f86bf125cd4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
066a1f429a42db429ccb9f86bf125cd4_JaffaCakes118
-
Size
49KB
-
MD5
066a1f429a42db429ccb9f86bf125cd4
-
SHA1
7473c0f18d69fc2cedefe102c72bed79da0be04f
-
SHA256
64d0dbae574e4e3f4c9c38764b5029058f9156e9e78f6166e10c1e5031d978b2
-
SHA512
29b6ae31722e1c217ad98176c752c904c29046dbe851f4e7086fdc45d7cfbeb248c4f2561b73cc59f0907282846660a883937d56f4c696232a4082e09ce0c342
-
SSDEEP
768:EbXR8rJsx7LnIhYMOWkmGLL6CEWAt6Tp6TjXafzx6t2k2l7ocud80Jm1RZ+:EV8ruxkmW+L6yC9jXOBuS7RZ+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 066a1f429a42db429ccb9f86bf125cd4_JaffaCakes118
Files
-
066a1f429a42db429ccb9f86bf125cd4_JaffaCakes118.exe windows:5 windows x86 arch:x86
0b3025d6b804f16f5fa38d9706012032
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
CreateProcessW
WaitForSingleObject
GetSystemTimeAsFileTime
GetStartupInfoW
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
RaiseException
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
WideCharToMultiByte
LCMapStringW
user32
CreateDesktopW
CloseDesktop
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ