d:\vsp\Toolbar4\release_bin\ClearHist.pdb
Static task
static1
Behavioral task
behavioral1
Sample
402827e2798a173c8d692bbc81454de2_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
402827e2798a173c8d692bbc81454de2_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
402827e2798a173c8d692bbc81454de2_JaffaCakes118
-
Size
128KB
-
MD5
402827e2798a173c8d692bbc81454de2
-
SHA1
3c046476511dd0ff17e658914fc1fa589c9fbe5b
-
SHA256
e06eb746b19b092e44765fa37cb6da871cc4e17c12f208393f17318118a28b20
-
SHA512
3738d621a48ebf13a7e834a10e7cbde50cbde2bbf160d81f88be20f4720322788775dba538e7b97fe51386bf89ce38814422a534e6a2e354bbeb3f654dce8bc6
-
SSDEEP
3072:zV2Ao5optqTQLBnnZ9vQ2wgoDmS2pajuzsu/yg:kAwFIZ94Afp+4f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 402827e2798a173c8d692bbc81454de2_JaffaCakes118
Files
-
402827e2798a173c8d692bbc81454de2_JaffaCakes118.exe windows:4 windows x86 arch:x86
22140fc584ccdb7f79e8a8b825fbd4a3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
CreateToolhelp32Snapshot
Process32First
OpenProcess
TerminateProcess
Process32Next
HeapSize
InitializeCriticalSection
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetLastError
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
GetProcAddress
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetStringTypeA
GetStringTypeW
Sleep
GetLocaleInfoA
RtlUnwind
LoadLibraryA
user32
MessageBoxA
advapi32
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteKeyA
RegEnumKeyExA
shell32
ShellExecuteA
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 996B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.trdata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE