RegTlib.pdb
Static task
static1
Behavioral task
behavioral1
Sample
073a1b5e7119fe7596992f390ada263f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
073a1b5e7119fe7596992f390ada263f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
073a1b5e7119fe7596992f390ada263f_JaffaCakes118
-
Size
60KB
-
MD5
073a1b5e7119fe7596992f390ada263f
-
SHA1
5e145cbb69c8ee457b53d8a1799f5ac90a7f2403
-
SHA256
e0a35c90212e9f6829c957d393c5992eddb5ba17ca2130cc6b21d84f015d5561
-
SHA512
e6be0afa3ddc3101a5f02f5833f2c90c36c2676e6143caeeeb6ae9a45aec2120d95c6082fb0d5b6e81be8eafb3eb3a1a1f24630c80d88d650739d9c61388a24b
-
SSDEEP
1536:t6fzce6nSU92FdSt3I33ICOsGlk4utgiyH/X:t6LcH1FDutgiyH/X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 073a1b5e7119fe7596992f390ada263f_JaffaCakes118
Files
-
073a1b5e7119fe7596992f390ada263f_JaffaCakes118.exe windows:5 windows x86 arch:x86
9d71223625f4104cdeb3ca67f83bf824
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
MultiByteToWideChar
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
LoadLibraryA
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
RtlUnwind
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
oleaut32
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
ole32
OleUninitialize
OleInitialize
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE