C:\not\cryptor\xstubexe\Release\xstubexe.pdb
Static task
static1
Behavioral task
behavioral1
Sample
13ac2fd9781e778fed3919312da70bfa_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
13ac2fd9781e778fed3919312da70bfa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
13ac2fd9781e778fed3919312da70bfa_JaffaCakes118
-
Size
798KB
-
MD5
13ac2fd9781e778fed3919312da70bfa
-
SHA1
413ed0d10aeecaf312b47139d39d209539dd0625
-
SHA256
13b4adb25fc32373df41bcb046c4ba95949410d1f69c11d8f4dfeaf3b8d5793b
-
SHA512
6cc4e6e8295ecb35706a3db9a18d5e9eff1433d134d5d1d50eb0dfadecf7d1d253d2c03124f8ea6b39b148e22bbbe3f4a6d7f7be614a3e4816eb560dccafc175
-
SSDEEP
24576:yixPe6FpCBoQH3htXcUQcN1jC+dmDMSzuz:yoQH3kUQcNUz6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13ac2fd9781e778fed3919312da70bfa_JaffaCakes118
Files
-
13ac2fd9781e778fed3919312da70bfa_JaffaCakes118.exe windows:5 windows x86 arch:x86
10a3a125ca50ed9e960785f37e71c014
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
HeapCreate
GetProcessHeap
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
HeapAlloc
CreateFileA
ExitProcess
shell32
SHBrowseForFolderA
ole32
CoInitialize
netapi32
NetApiBufferSize
wldap32
ord95
Sections
.text Size: 727KB - Virtual size: 727KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.oiu Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bdsh Size: - Virtual size: 6.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sock Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sock2 Size: 512B - Virtual size: 19B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 57B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ