c:\Documents and Settings\Administrator\My Documents\Visual Studio Projects\05-039\Debug\05-039.pdb
Static task
static1
Behavioral task
behavioral1
Sample
52c1351a74ea6772ad8eee1ede6d7a9e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
52c1351a74ea6772ad8eee1ede6d7a9e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
52c1351a74ea6772ad8eee1ede6d7a9e_JaffaCakes118
-
Size
104KB
-
MD5
52c1351a74ea6772ad8eee1ede6d7a9e
-
SHA1
90a00992648105da48eaed389ed802ef9bfde5a8
-
SHA256
e03f7dc4f2949caf7022a8426b846c32d2d70ca3e50cc95a16e3099e736656e2
-
SHA512
35ac9492e87e6dd641733b5765dfaa307067a0466cfaeeae2f35d59eb1d81f589108fc0f430edf6a5e04a2854039cbed2cdbde06f90083cb5fe03f997580dcb1
-
SSDEEP
1536:g3yQM+06IVaEwMqWiVrVJGI9yssqIbiK0n/l:g3yQMV6IYMCVHN9yssqIb0/l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52c1351a74ea6772ad8eee1ede6d7a9e_JaffaCakes118
Files
-
52c1351a74ea6772ad8eee1ede6d7a9e_JaffaCakes118.exe windows:4 windows x86 arch:x86
fb539f5ede58184ceb0289dfe8e39126
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
TransactNamedPipe
CreateFileA
FlushFileBuffers
LCMapStringW
LCMapStringA
GetLocaleInfoA
GetSystemInfo
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetCommandLineA
GetVersionExA
GetModuleHandleA
DebugBreak
RaiseException
GetProcAddress
LoadLibraryA
HeapAlloc
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleFileNameA
HeapReAlloc
HeapFree
GetLastError
HeapDestroy
HeapCreate
VirtualFree
TerminateProcess
GetCurrentProcess
ExitProcess
VirtualAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
RtlUnwind
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
GetProcessHeap
CloseHandle
FreeLibrary
SetConsoleCtrlHandler
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
VirtualQuery
InterlockedExchange
VirtualProtect
SetStdHandle
mpr
WNetAddConnection2A
rpcrt4
UuidToStringA
UuidFromStringA
Sections
.textbss Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE