SCardSvr.pdb
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_6c5d68f5e055442abb86593d0683ebab.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_6c5d68f5e055442abb86593d0683ebab
-
Size
651KB
-
MD5
6c5d68f5e055442abb86593d0683ebab
-
SHA1
97229b14e8c318dd24cd8338a6bd1b354e080a19
-
SHA256
60b27528817adeefb8fe848ad3e363b0691e4adcc183d9376f859e3568c027af
-
SHA512
0856d500ff9c7faa46cc053df53ec36533b01dd6ce364140537147c334db99e1a5f8c4cfd1f10256f523efe5e9ae64ef65de55f0c62cecd41a437cb258863acd
-
SSDEEP
12288:gMU7R8B1GgZCI6wjfnJgtu3QN4Z5MnFXXPQZt9bqxTW/CJKWkl+u7:gJ7R8B0oCkj+c3inF4z9bqw/iKWk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_6c5d68f5e055442abb86593d0683ebab
Files
-
JaffaCakes118_6c5d68f5e055442abb86593d0683ebab.exe windows:5 windows x86 arch:x86
ab97a11f1a35fac580d7ba2691a1b76a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
__getmainargs
__CxxFrameHandler
_CxxThrowException
_ultoa
?terminate@@YAXXZ
_onexit
__dllonexit
_controlfp
??1type_info@@UAE@XZ
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
??3@YAXPAX@Z
__initenv
exit
_cexit
_XcptFilter
_exit
_c_exit
printf
puts
?set_terminate@@YAP6AXXZP6AXXZ@Z
??2@YAPAXI@Z
kernel32
UnhandledExceptionFilter
WriteFile
ConnectNamedPipe
CreateNamedPipeA
DisconnectNamedPipe
SetLastError
RaiseException
LoadLibraryA
InterlockedExchange
FreeLibrary
GetProcAddress
CreateFileA
SetThreadPriority
CreateWaitableTimerA
SetWaitableTimer
CancelWaitableTimer
DeviceIoControl
GetOverlappedResult
WaitForMultipleObjects
OpenProcess
DuplicateHandle
CreateThread
ResumeThread
PulseEvent
GetProcessHeap
HeapAlloc
lstrcpyA
OpenEventA
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
ResetEvent
GetLastError
lstrlenA
Sleep
CloseHandle
WaitForSingleObject
CreateEventA
ExpandEnvironmentStringsA
GetModuleFileNameA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
ReadFile
SetUnhandledExceptionFilter
GetModuleHandleA
lstrcmpiA
FormatMessageA
LocalAlloc
LocalFree
MultiByteToWideChar
GetACP
WideCharToMultiByte
lstrlenW
ntdll
strpbrk
_strnicmp
isgraph
sprintf
_itoa
Sections
.text Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 576KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE