c:\users\qu4nvu\desktop\binder_mod_qu4nvu\release\Stub.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3e5fd390c1a30230dc8a39a22e8f34b8_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
3e5fd390c1a30230dc8a39a22e8f34b8_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3e5fd390c1a30230dc8a39a22e8f34b8_JaffaCakes118
-
Size
1.3MB
-
MD5
3e5fd390c1a30230dc8a39a22e8f34b8
-
SHA1
466aa0dec900ad5d1dd9d5c98ba7f1d1d0f27058
-
SHA256
18c3b1990f0d7ccbdb45fbc21cfa9bfc7ad42cfaf8b1f52ad2a28d7a41fd5828
-
SHA512
e53e8467ce4e45e9af99123ab18c6d7ac4878d54f2e9eee4305cea7ea736c17d4a66238e27ad658724afa5a3f3d7a38d6bea7240bf17b9ae5d0f21bce40ff6ae
-
SSDEEP
24576:tOIvr9Hs/pSzaqrwjmec4T5FashR9D+POhohURjFbS8ph/f:sfRurwjm2x2muK3h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e5fd390c1a30230dc8a39a22e8f34b8_JaffaCakes118
Files
-
3e5fd390c1a30230dc8a39a22e8f34b8_JaffaCakes118.exe windows:4 windows x86 arch:x86
150530a0a7d2d60ebb96593836774553
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
wsprintfA
shell32
ShellExecuteA
kernel32
SetHandleCount
CreateFileA
SetFilePointer
GetWindowsDirectoryA
WriteFile
ReadFile
GetSystemDirectoryA
lstrcatA
GetModuleFileNameA
CloseHandle
GetTempPathA
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetProcAddress
GetModuleHandleA
ExitProcess
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
Sleep
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
HeapSize
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ