ipv6.pdb
Static task
static1
Behavioral task
behavioral1
Sample
138615aea472f076af465a2219771cba_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
138615aea472f076af465a2219771cba_JaffaCakes118
-
Size
205KB
-
MD5
138615aea472f076af465a2219771cba
-
SHA1
5483bed0f6f83035e3e2a95c651f1f3ee4d1484b
-
SHA256
147c8a507e91ef5a2d0b2e8e3877ae8619d864e0c6bd1663199cbe2bd1336169
-
SHA512
e2bc3649fe2cc091245b3c798e53f053bcd0e9b55430bd3fc27c666323ce41e60c86619acaf5d35996c43d2138a695d1a4f57f8a6ddd226f87cdc52699ebcefd
-
SSDEEP
3072:CvrcBijBeKyhl+3N472DTjMbh1+u7jb2WLyYAf57F8ATccADAcRN:O+ijBQ2vaDjb2v/dqEcD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 138615aea472f076af465a2219771cba_JaffaCakes118
Files
-
138615aea472f076af465a2219771cba_JaffaCakes118.exe windows:5 windows x86 arch:x86
c38eed9a4521f048c938efbdad470e6d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
advapi32
CloseServiceHandle
OpenServiceA
OpenSCManagerA
ControlService
kernel32
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
MultiByteToWideChar
DeviceIoControl
GetLastError
lstrcatA
lstrcpyA
WideCharToMultiByte
CreateFileW
LoadLibraryExW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCommandLineA
GetVersionExA
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
InterlockedExchange
VirtualQuery
GetStringTypeA
GetStringTypeW
SetFilePointer
LCMapStringA
LCMapStringW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
SetStdHandle
FlushFileBuffers
CloseHandle
FormatMessageA
LocalFree
SetThreadUILanguage
ntdll
RtlGUIDFromString
RtlInitUnicodeString
ws2_32
htonl
getservbyname
htons
gethostbyaddr
ntohs
getservbyport
inet_ntoa
WSAStringToAddressA
WSAAddressToStringA
closesocket
WSAIoctl
socket
WSAStartup
gethostbyname
WSAGetLastError
WSASetLastError
inet_addr
ole32
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoInitializeEx
user32
CharToOemBuffA
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ