C:\Documents and Settings\Administrator\My Documents\Visual Studio 2008\Projects\Stub\Release\Stub.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0f2a3d96e8873a6928c509a0df6b4344_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0f2a3d96e8873a6928c509a0df6b4344_JaffaCakes118
-
Size
330KB
-
MD5
0f2a3d96e8873a6928c509a0df6b4344
-
SHA1
540885b60138231fa00e79488c457ac443aac483
-
SHA256
d1664b34bc4b09b15149d1d4264705bcff7abd010b7dcab25d8ef5d8bab39f47
-
SHA512
4c30ab02c470e9eaba304479d2cf42931d62903177a2cdd6ed5a2ddee12a6d0c6856198bc1517875d97809ee598194878bd7f1ecb6a3aab21d5f051d628e2045
-
SSDEEP
6144:QnMm0yuMks67Pei9YES6NPQT4ralYHIydS65te4yb6zgfzCDLg/:QMm0yuMMYE1PQT44YFdS8teSD0/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f2a3d96e8873a6928c509a0df6b4344_JaffaCakes118
Files
-
0f2a3d96e8873a6928c509a0df6b4344_JaffaCakes118.exe windows:5 windows x86 arch:x86
a15bb931de472a60e5afa5bce906d83b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
FindResourceA
LoadResource
EndUpdateResourceW
UnlockFile
SleepEx
EnumTimeFormatsW
SizeofResource
FormatMessageW
GetFileAttributesA
GlobalFlags
SetConsoleMode
CompareStringW
IsBadStringPtrA
VerifyVersionInfoW
GetStdHandle
FindFirstFileA
GetProcAddress
GetFileType
LockResource
GetModuleFileNameA
GetModuleHandleA
VirtualProtect
LocalSize
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
Sleep
ExitProcess
WriteFile
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ