d:\Source\Wdprj\WDExe\Release\WDExe.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2c744437718b689a64e8a4b262291fba_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2c744437718b689a64e8a4b262291fba_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2c744437718b689a64e8a4b262291fba_JaffaCakes118
-
Size
673KB
-
MD5
2c744437718b689a64e8a4b262291fba
-
SHA1
ad405fc2dd0aef5f6214f17b01baed19489ebab6
-
SHA256
01c271c0f9a82448bb268824a6dd63c008878433121815d38e8ec0534563e6bc
-
SHA512
bdec856c60e4327f0f78d0773320a78726facbecf26a2c5a6b067fb5237bd2fce1494b3c0e1f96c7ffab6ea911ede5b4465764cdb5b9234ecb84d5b74378fabd
-
SSDEEP
12288:2vOJU5T+sdYCpTKrweJJ1GPQRt3pU8ZW0nqPqUo7Fu93Z99Mwo0:uOJU5HYCtcJJ+ote1qUeFcpXMA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c744437718b689a64e8a4b262291fba_JaffaCakes118
Files
-
2c744437718b689a64e8a4b262291fba_JaffaCakes118.exe windows:4 windows x86 arch:x86
2e27991bb1faa865d07e322c98c6ad9c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
isdigit
vsprintf
_mbclen
_mbsinc
_ismbcspace
atoi
realloc
_mbspbrk
_mbsrchr
_makepath
memmove
_mbsstr
wcscat
wcslen
wcschr
_mbschr
memchr
_vsnprintf
_purecall
_mbscmp
strcat
_mbsnbcpy
sprintf
strlen
strncmp
strcpy
_stricmp
_mbsicmp
memcpy
memset
free
malloc
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
_CxxThrowException
kernel32
GetTempPathA
RaiseException
InterlockedExchange
LocalAlloc
GetStartupInfoA
CreateThread
TerminateThread
ResumeThread
MultiByteToWideChar
GetCurrentThreadId
TlsFree
TlsAlloc
VirtualProtect
VirtualQuery
TlsGetValue
TlsSetValue
GetModuleHandleA
GetFullPathNameA
GetVersionExA
FindNextFileA
GetFileAttributesA
FindClose
FindFirstFileA
CreateDirectoryA
CopyFileA
MoveFileA
DeleteFileA
SetEndOfFile
FlushFileBuffers
UnlockFile
LockFile
SetFilePointer
WriteFile
SetLastError
CreateFileA
SetErrorMode
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateMailslotA
ExpandEnvironmentStringsA
GetLocalTime
GetComputerNameA
GetProfileStringA
ReadFile
CreateFileMappingA
GetLastError
CloseHandle
MapViewOfFile
UnmapViewOfFile
LoadLibraryA
GetModuleFileNameA
CreateMutexA
WaitForSingleObject
ReleaseMutex
GetCurrentProcessId
FindResourceA
LoadResource
LockResource
FreeResource
FreeLibrary
CreateEventA
GetTempFileNameA
OpenFileMappingA
GetProcAddress
GetSystemDefaultLangID
FormatMessageA
LocalFree
GetPrivateProfileIntA
GetPrivateProfileStringA
GetCommandLineA
CreateProcessA
Sleep
GetMailslotInfo
GetExitCodeProcess
Exports
Exports
CommandeComposante
DeclareProxy
Sections
.text Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ