G:\Dokumente und Einstellungen\Dragon_of_Storm\Desktop\Neuer Ordner (3)\BinderStub\Release\BinderStub.pdb
Static task
static1
Behavioral task
behavioral1
Sample
091d43f78692c97cffb20bfd11e152b4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
091d43f78692c97cffb20bfd11e152b4_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
091d43f78692c97cffb20bfd11e152b4_JaffaCakes118
-
Size
1.0MB
-
MD5
091d43f78692c97cffb20bfd11e152b4
-
SHA1
f75e2eaf1a1133b4c268371e4f7f2095f7e5b763
-
SHA256
599b3054bf7823581534c33b1ae9b19d619a1dc8853b723db789684295059207
-
SHA512
3243c372cc5590847f77b040433a1952511a1a7583de9481e9c31ac9872d840fc9047e2faf25966b5a1b5069d7186e48897db1082e405aa8c930fc05451c1c94
-
SSDEEP
3072:yuHtibYGdJRWCByUvnQLRhy4bbbbbbbbbbbbY/nHldgn9kvFf5o1XarjxVO6ymeH:ZtsYmJRW6yUD/n3dYapfY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 091d43f78692c97cffb20bfd11e152b4_JaffaCakes118
Files
-
091d43f78692c97cffb20bfd11e152b4_JaffaCakes118.exe windows:5 windows x86 arch:x86
5e6e8db5447e50ce9936c66ce45f96c0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetWindowsDirectoryA
GetModuleFileNameA
GetModuleHandleA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentThreadId
shell32
ShellExecuteA
msvcr90
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
__getmainargs
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_amsg_exit
fclose
fseek
ftell
fwrite
fread
fopen
rewind
calloc
free
strncmp
_adjust_fdiv
memset
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 520B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ