cmd.pdb
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_60a35a694c0036f1069e44092d400ec7.exe
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_60a35a694c0036f1069e44092d400ec7
-
Size
880KB
-
MD5
60a35a694c0036f1069e44092d400ec7
-
SHA1
ab0277112625b9d8197b169ecf3877fc61d88d5f
-
SHA256
9296bd38edc3ee0edf035fddf3d749ca0e832455cadf71273405563da6f5a7f0
-
SHA512
fedfbf59cbb42a65342d05734e6f29797ab9276c4f4790ba7c3c6cadc09ddcf31a51a54d8d01bb7315e3981554e3ffbd70fc4bf4d094241d51b9ae3791424985
-
SSDEEP
12288:lKPRz7pW6NpUUIIeAldFzc+spaUm5A2SKluFFS8h:URzlW6n9eQd/smBiF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_60a35a694c0036f1069e44092d400ec7
Files
-
JaffaCakes118_60a35a694c0036f1069e44092d400ec7.exe windows:5 windows x86 arch:x86
2bd3acee4f08a59f93ab911e0cec0ed4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
_initterm
__getmainargs
__initenv
_cexit
_XcptFilter
_exit
_c_exit
calloc
_wcslwr
qsort
_vsnwprintf
wcsstr
_dup2
_dup
_open_osfhandle
_close
swscanf
_ultoa
_pipe
_seh_longjmp_unwind
_setmode
wcsncmp
iswxdigit
fflush
exit
_wtol
time
srand
_setjmp3
_wcsdup
__setusermatherr
_errno
iswalpha
malloc
free
printf
rand
swprintf
_iob
fprintf
towlower
realloc
setlocale
_snwprintf
wcscat
_wcsupr
wcsncpy
_wpopen
fgets
_pclose
memmove
wcschr
iswspace
_tell
longjmp
wcscmp
_wcsnicmp
_wcsicmp
wcstol
iswdigit
_getch
_get_osfhandle
_adjust_fdiv
__p__commode
__p__fmode
_controlfp
__set_app_type
wcsrchr
_except_handler3
wcscpy
wcslen
wcsspn
towupper
advapi32
GetSecurityDescriptorOwner
LookupAccountSidW
CreateProcessAsUserW
RegCreateKeyExW
RegSetValueExW
RegSetValueW
RegDeleteKeyW
RegOpenKeyW
RegDeleteValueW
RegEnumKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RevertToSelf
SaferIdentifyLevel
SaferComputeTokenFromLevel
SaferCloseLevel
ImpersonateLoggedOnUser
SaferRecordEventLogEntry
GetFileSecurityW
kernel32
RemoveDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
TerminateProcess
WaitForSingleObject
GetExitCodeProcess
LoadLibraryExW
CopyFileW
SetFileAttributesW
SetEndOfFile
DeleteFileW
SetFileTime
CreateDirectoryW
FillConsoleOutputAttribute
SetConsoleTextAttribute
ScrollConsoleScreenBufferW
FormatMessageW
DuplicateHandle
FlushFileBuffers
HeapReAlloc
HeapSize
VirtualAlloc
VirtualFree
GetFileAttributesExW
LocalFree
GetDriveTypeW
InitializeCriticalSection
CompareFileTime
GetWindowsDirectoryW
GetConsoleTitleW
GetModuleFileNameW
GetVersion
EnterCriticalSection
LeaveCriticalSection
ExpandEnvironmentStringsW
SearchPathW
WriteFile
SetFilePointerEx
GetVolumeInformationW
MoveFileW
SetConsoleTitleW
MoveFileExW
GetFileAttributesW
NeedCurrentDirectoryForExePathW
GetBinaryTypeW
GetCurrentThreadId
CreateProcessW
LoadLibraryW
ReadProcessMemory
SetLastError
SetErrorMode
GetConsoleMode
SetConsoleMode
SetEnvironmentStringsW
SetEnvironmentVariableW
GetDiskFreeSpaceExW
ResumeThread
SetProcessAffinityMask
GetSystemInfo
GetThreadLocale
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CmdBatNotification
GetVDMCurrentDirectories
LocalAlloc
FreeLibrary
InterlockedExchange
LoadLibraryA
SetConsoleCtrlHandler
ReadConsoleW
GetLastError
CloseHandle
SetFilePointer
SetThreadLocale
GetProcAddress
GetModuleHandleW
lstrcmpW
lstrcmpiW
HeapAlloc
GetProcessHeap
HeapFree
MultiByteToWideChar
ReadFile
WriteConsoleW
FillConsoleOutputCharacterW
SetConsoleCursorPosition
RaiseException
GetConsoleScreenBufferInfo
GetStdHandle
GetFileType
VirtualQuery
FlushConsoleInputBuffer
GetCPInfo
GetConsoleOutputCP
WideCharToMultiByte
GetFileSize
CreateFileW
FindClose
FindNextFileW
FindFirstFileW
GetFullPathNameW
GetUserDefaultLCID
GetLocaleInfoW
SetLocalTime
SystemTimeToFileTime
GetSystemTime
FileTimeToSystemTime
GetDateFormatW
FileTimeToLocalFileTime
GetTimeFormatW
GetLocalTime
GetCommandLineW
GetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
user32
GetUserObjectInformationW
GetThreadDesktop
MessageBeep
GetProcessWindowStation
mpr
WNetCancelConnection2W
WNetGetConnectionW
WNetAddConnection2W
Sections
.text Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 113KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: 500KB - Virtual size: 1.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE