C:\Users\Lyu\Desktop\assembly\Debug\assembly.pdb
Static task
static1
Behavioral task
behavioral1
Sample
156b65e35132e3125e5b506c159c1974_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
156b65e35132e3125e5b506c159c1974_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
156b65e35132e3125e5b506c159c1974_JaffaCakes118
-
Size
16KB
-
MD5
156b65e35132e3125e5b506c159c1974
-
SHA1
daa50b570ddef0954cf162551daad73d02f6a4ef
-
SHA256
cdd1d0438eef236a7c737574346e96d0321ec891824fc1964c46141407b85098
-
SHA512
864242a97b2a5a33c2a3f58131346b94f7c9f8136b0cdb5585926de87867b72190ffae548eb4d4aaedd68ab731b59e080576a1b9cbe75d2b389d3f8847a964b8
-
SSDEEP
96:WAY8SqYcCSIR3VjXllyB4BAvDZohob6sAsWC0Svo:WA9YgIRlTBA+htsAOQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 156b65e35132e3125e5b506c159c1974_JaffaCakes118
Files
-
156b65e35132e3125e5b506c159c1974_JaffaCakes118.exe windows:5 windows x86 arch:x86
b171b66d46012064749fb2535f56ad3a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
FlushConsoleInputBuffer
GetCommandLineA
GetConsoleMode
GetConsoleScreenBufferInfo
GetLocalTime
GetStdHandle
GetSystemTime
ReadConsoleA
SetConsoleCursorPosition
SetConsoleMode
SetConsoleTextAttribute
Sleep
SystemTimeToFileTime
WriteConsoleA
WriteConsoleOutputCharacterA
WriteConsoleOutputAttribute
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 635B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 923B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 564B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ