C:\034h587gt\tfg.pdb
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_b928baf3d7edb8bae41b67c2a0d1ea5f.exe
Resource
win10v2004-20250314-en
General
-
Target
JaffaCakes118_b928baf3d7edb8bae41b67c2a0d1ea5f
-
Size
205KB
-
MD5
b928baf3d7edb8bae41b67c2a0d1ea5f
-
SHA1
5bfb3d9fc214d4149a6b68f1b444a520da517173
-
SHA256
9c60daa7faa2084ef86e196d45a0647e0b83c96676d9e014b8b3b6e240e52f7c
-
SHA512
b3e9494e5957a3d3357b4a7fc190173c366df8cb7c0491763db2ee04cc6764efb8bfe6ca6d3abd0ec154bc71143e4984376741c57d8e19f11d4b9b3a1ea66d64
-
SSDEEP
6144:aOxDjWfP3Lz2pA9QZzUMiPzDLXtdCp51I:xxDjWffLz2a9CXOZcpc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_b928baf3d7edb8bae41b67c2a0d1ea5f
Files
-
JaffaCakes118_b928baf3d7edb8bae41b67c2a0d1ea5f.exe windows:4 windows x86 arch:x86
d6824fa158c389ddd76f7eb0d82772db
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ws2_32
WSAGetLastError
recv
listen
comctl32
ord14
kernel32
LCMapStringA
LCMapStringW
SetStdHandle
HeapReAlloc
GetProcAddress
LoadLibraryA
LockResource
SizeofResource
LoadResource
FindResourceA
GetSystemTime
ExitProcess
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
DebugBreak
RaiseException
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
RtlUnwind
HeapAlloc
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
FlushFileBuffers
HeapFree
GetLastError
HeapDestroy
HeapCreate
VirtualFree
TerminateProcess
GetCurrentProcess
VirtualAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetProcessHeap
CloseHandle
FreeLibrary
VirtualQuery
InterlockedExchange
SetConsoleCtrlHandler
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
SetFilePointer
VirtualProtect
GetSystemInfo
GetLocaleInfoA
Sections
.text Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ