c:\myapp\stsapp.pdb
Static task
static1
Behavioral task
behavioral1
Sample
145701777161e9cf7c4bf0939b37b6b4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
145701777161e9cf7c4bf0939b37b6b4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
145701777161e9cf7c4bf0939b37b6b4_JaffaCakes118
-
Size
161KB
-
MD5
145701777161e9cf7c4bf0939b37b6b4
-
SHA1
93808466821682d67ca14cbac84ccd1dfdaf990c
-
SHA256
4ce6f28335eea6aebab49f0483374d03a4c7c74f781544d15855914d6e7936e0
-
SHA512
141141bc1a9a6c53e8e91769960b9732df3cbf059f31555fec49cc046bc5423b6bd1e91f1d7b1644ba1851ec7074d04758692710b82ac18ae295ba954ed18fea
-
SSDEEP
3072:/8S7sEUlu8JVw9BJJcU3Co6KUo46dlupBDrd:U0scmVo3lpDupBHd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 145701777161e9cf7c4bf0939b37b6b4_JaffaCakes118
Files
-
145701777161e9cf7c4bf0939b37b6b4_JaffaCakes118.exe windows:4 windows x86 arch:x86
632f93ea0809254c0cf5f207c5cc8568
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
Sleep
VirtualAllocEx
GetProcessHeap
LoadLibraryA
GetModuleHandleA
CloseHandle
VirtualFree
VirtualAlloc
VirtualProtect
GetProcAddress
CreateFileA
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
SetStdHandle
SetFilePointer
GetLocaleInfoA
HeapSize
LCMapStringW
LCMapStringA
HeapAlloc
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
HeapReAlloc
InterlockedExchange
VirtualQuery
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
MultiByteToWideChar
GetSystemInfo
GetACP
GetOEMCP
GetCPInfo
GetStringTypeA
GetStringTypeW
ReadFile
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
FlushFileBuffers
RaiseException
user32
LoadCursorA
LoadBitmapA
PostMessageA
EnableWindow
MessageBoxA
DestroyWindow
GetDesktopWindow
winscard
SCardForgetReaderW
ws2_32
WSAStartup
Exports
Exports
?fCopS@@YAEPADK@Z
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 200KB - Virtual size: 202KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ