C:\xampp\htdocs\Loct\d21507ebf55141faa3a3177be1abc432\Loader\Project1\Release\Project1.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0c377447f098f43601e8c21609c41e1c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0c377447f098f43601e8c21609c41e1c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0c377447f098f43601e8c21609c41e1c_JaffaCakes118
-
Size
228KB
-
MD5
0c377447f098f43601e8c21609c41e1c
-
SHA1
8da17dacc87338c630430071efe7850ef34c0184
-
SHA256
3adaa1111196714a172b66f0deb9013f5b86c1671a7d126b69703d64e358f624
-
SHA512
b8746e95f87b7e948db46d4270ee10dc9a6fa1ef9e97defeda2a27053523928c9e8c79371799c2eb48569ca4f983801e15fd476de1a15f2b5c7e65703d32fdb0
-
SSDEEP
3072:/6HGteVUP/qOu43gC4S9HbJhElye1x8JtVTrrTlznlAPOwJFnS1mekUZPPRkTRKF:/dQOJu4wC3tfVSQnl6JFnom3UtPSTRSL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c377447f098f43601e8c21609c41e1c_JaffaCakes118
Files
-
0c377447f098f43601e8c21609c41e1c_JaffaCakes118.exe windows:6 windows x86 arch:x86
ca24a8fe7300d3915643d0e4fbc5d1cd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
cabinet
ord22
ord23
ord20
shlwapi
PathRemoveFileSpecW
kernel32
GetConsoleWindow
GetCommandLineW
CreateDirectoryW
CreateFileA
CreateFileW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
GetTempFileNameW
ReadFile
SetFilePointer
WriteFile
GetTempPathW
CloseHandle
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
WaitForSingleObject
GetCurrentProcess
ExitProcess
GetExitCodeProcess
CreateProcessW
VirtualProtect
Wow64DisableWow64FsRedirection
Wow64RevertWow64FsRedirection
IsWow64Process
GetModuleFileNameW
lstrcpyW
lstrcatW
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
user32
GetDC
GrayStringW
ShowWindow
ole32
CoInitialize
msvcrt
__wgetmainargs
_controlfp
_except_handler3
__set_app_type
__p__fmode
memset
_exit
_XcptFilter
exit
__p___winitenv
_wcsicmp
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ