e:\LoadLua_FY2\Release\Cspk_CR.pdb
Static task
static1
Behavioral task
behavioral1
Sample
094a3634eac3739ee345472dfe830905_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
094a3634eac3739ee345472dfe830905_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
094a3634eac3739ee345472dfe830905_JaffaCakes118
-
Size
97KB
-
MD5
094a3634eac3739ee345472dfe830905
-
SHA1
e00f61b0e9330fa62e65b2c5519479f781259503
-
SHA256
6f2cfbea16f6f601fed0db52bcd305408b753c5dc7320b5ec2c05977f049f778
-
SHA512
e86af475c6687cd6ab250046234b15e09241f4f803f11b8a3553895da6139e3c108a2c0626c642cf82d8ff8446e998fc35573870763e761ba00322f8fa8fac23
-
SSDEEP
1536:X8qMsDHZOl6MFCvJgZP1ap6MFCvJgZP1agMFCvJgZP1ah:PM6Ol6EPgp6EPgUEPgh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 094a3634eac3739ee345472dfe830905_JaffaCakes118
Files
-
094a3634eac3739ee345472dfe830905_JaffaCakes118.exe windows:4 windows x86 arch:x86
4937d6a6480bf439664fda7657a26df6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetModuleFileNameA
SetFileAttributesA
GetExitCodeProcess
Sleep
CloseHandle
DeleteFileA
FindResourceA
LoadResource
LockResource
SizeofResource
CreateFileA
WriteFile
FreeResource
CreateProcessA
GetTempPathA
GetSystemDirectoryA
GetFileAttributesA
CopyFileA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
GetStartupInfoA
GetModuleHandleA
GetSystemTimeAsFileTime
user32
wsprintfA
urlmon
URLDownloadToFileA
msvcr71
strcat
??2@YAPAXI@Z
memset
_mbsnbicmp
atoi
memcpy
??3@YAXPAX@Z
sprintf
strrchr
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
_controlfp
strlen
_mbsrchr
__security_error_handler
strcpy
_mbschr
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ