c:\Users\Juan-nonymous\Desktop\Stub\release\Stub.pdb
Static task
static1
Behavioral task
behavioral1
Sample
416e267bb8c911b394a8aaf915de20af_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
416e267bb8c911b394a8aaf915de20af_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
416e267bb8c911b394a8aaf915de20af_JaffaCakes118
-
Size
665KB
-
MD5
416e267bb8c911b394a8aaf915de20af
-
SHA1
7626288dd3c300e3a0ae187c6c8bd14c9152b226
-
SHA256
db8d26e7ddb50ed8e633d7ca24c8ef38d40ac0bee6cb6dd6f2f0e7c5d424f435
-
SHA512
2ddd716469e8861ca5982461a6dd8b0a2b14c5a44251e49827f8d4de84cd190b222fdc9b3a90b064459641bf2f0db94b3ef01e636febe6f4c139c0229f5d169e
-
SSDEEP
12288:DKfCwASB/dgp278QfBaqWDYqOXuar6jTEmmIXV8Hs7z06sbQOXf5WB1RCg4MsORF:mKSB6278sBKGOmYws7zUbQOv5U1RCvMZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 416e267bb8c911b394a8aaf915de20af_JaffaCakes118
Files
-
416e267bb8c911b394a8aaf915de20af_JaffaCakes118.exe windows:4 windows x86 arch:x86
491f3cd9d8d915e89c9bcc606d5a7076
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetThreadContext
FindResourceA
SetThreadContext
LoadResource
VirtualFree
SizeofResource
GetProcAddress
VirtualAlloc
VirtualAllocEx
LoadLibraryA
LockResource
GetModuleFileNameA
GetModuleHandleA
ResumeThread
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
msvcr80
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__initenv
exit
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
__p__commode
memset
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 658KB - Virtual size: 658KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ