Elevated_MpMiniSigStub.pdb
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_6c5c58316d6247067d88bce682c33f47.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_6c5c58316d6247067d88bce682c33f47
-
Size
1.1MB
-
MD5
6c5c58316d6247067d88bce682c33f47
-
SHA1
fcf05aa1c4736487b968ba203904e9ce798c5993
-
SHA256
672a3aa865ca88215e0d00a4e335c7e685728ebb0e0db5453bf361efdda77172
-
SHA512
35f57b85fa64d37c5ef97d20b362bebc9154a4abbc4cb19ce307fb148f3aaeda39a609ca44050305a232f258dda711e22c5bd3e7b219f604123da8e7fd0c5d5d
-
SSDEEP
24576:PMMo40deAzmKp6hoySWtWbYi67mdrnAQ53r2lwCSJI6qsUDBsIdM:J/WRzKmWtWEJmdrnAQ5rMwpu6qsUlsIC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_6c5c58316d6247067d88bce682c33f47
Files
-
JaffaCakes118_6c5c58316d6247067d88bce682c33f47.exe windows:6 windows x86 arch:x86
2c44d81cd9f65f9b834ec318e6d604da
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
UnhandledExceptionFilter
GetTickCount
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineW
SetUnhandledExceptionFilter
ExitProcess
GetModuleHandleW
GetProcAddress
EnumResourceNamesW
FindResourceW
FreeLibrary
LoadResource
CreateProcessW
HeapAlloc
GetSystemWindowsDirectoryW
HeapFree
CreateDirectoryW
WaitForSingleObject
GetProcessHeap
WriteFile
GetSystemDirectoryW
LoadLibraryW
SizeofResource
GetExitCodeProcess
CreateFileW
GetLastError
GetCurrentDirectoryW
LockResource
SetCurrentDirectoryW
RemoveDirectoryW
CloseHandle
DeleteFileW
SetFileAttributesW
advapi32
RegCloseKey
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
ntdll
memset
DbgPrint
memcpy
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 804B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 637KB - Virtual size: 636KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 440B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.vmp0 Size: 496KB - Virtual size: 1.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE