J:\g57udU4o1Ghg4En.pdb
Static task
static1
Behavioral task
behavioral1
Sample
14630e66b6a106f81ca3a20e4e2ebaba_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
14630e66b6a106f81ca3a20e4e2ebaba_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
14630e66b6a106f81ca3a20e4e2ebaba_JaffaCakes118
-
Size
191KB
-
MD5
14630e66b6a106f81ca3a20e4e2ebaba
-
SHA1
bd49d21a42a8e508c9295e4ba83a8a2628ac35a1
-
SHA256
993d1fd86346d9b67acd2e9fc1c159948f5f96fff179f081090fb854b5cb9d5f
-
SHA512
f6067358f73427156a46c745849f6381aed16d8881060075aab4a8fcd44c5ecea69a32ee0ade74a1dc416fe8e0dbe2ec3d2d57cbc5e50595448635a661aa65a2
-
SSDEEP
3072:i7OLnlXp65AjfjooYpyNOTzQlmhlJVF7hq10tW/RRU8:JjfjWyNOUmhT7hq1isr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14630e66b6a106f81ca3a20e4e2ebaba_JaffaCakes118
Files
-
14630e66b6a106f81ca3a20e4e2ebaba_JaffaCakes118.exe windows:5 windows x86 arch:x86
3ce01ea071b65eedf8c6d4bc4c53e496
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetTickCount
LoadLibraryA
GetModuleHandleA
GetLastError
HeapFree
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
VirtualAlloc
HeapReAlloc
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
RtlUnwind
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
CreateFileA
CloseHandle
FlushFileBuffers
user32
wvsprintfA
wsprintfA
Sections
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ