G:\Dokumente und Einstellungen\Dragon_of_Storm\Desktop\Neuer Ordner (3)\BinderStub\Release\BinderStub.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3a31d24362a1173d393b29feffe4b678_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
3a31d24362a1173d393b29feffe4b678_JaffaCakes118
-
Size
1.4MB
-
MD5
3a31d24362a1173d393b29feffe4b678
-
SHA1
2df901523a84969e141503f7459297af95f1b8c1
-
SHA256
ad3432aad4cae8f6d218f61f861375372f19c9ceafa002a96a97b3412196bb3c
-
SHA512
760086f363908493803bc1a6b2af0066fc5c698ee4102a47a9243c5aef8e9223cc3657de5d25538b94b34e143bf816c10089f958a06467f519724e17cb3d5d0a
-
SSDEEP
24576:wL9Iexa3oDastitBeWkCV60/2+gImGvrtMBqMR0fAXO/G/gKcJ9FoF2DrHJmfj8/:wRIFY/wtH4SgJGvWUMRM/JKcjaFAr8fg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a31d24362a1173d393b29feffe4b678_JaffaCakes118
Files
-
3a31d24362a1173d393b29feffe4b678_JaffaCakes118.exe windows:5 windows x86 arch:x86
5e6e8db5447e50ce9936c66ce45f96c0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetWindowsDirectoryA
GetModuleFileNameA
GetModuleHandleA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentThreadId
shell32
ShellExecuteA
msvcr90
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
__getmainargs
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_amsg_exit
fclose
fseek
ftell
fwrite
fread
fopen
rewind
calloc
free
strncmp
_adjust_fdiv
memset
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 520B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ