Overview
overview
10Static
static
3kata77/1file.pdf
windows7-x64
1kata77/1file.pdf
windows10-2004-x64
1Documento ...49.exe
windows7-x64
10Documento ...49.exe
windows10-2004-x64
10kata77/msg.html
windows7-x64
1kata77/msg.html
windows10-2004-x64
1kata77/sendeb.pl
ubuntu-18.04-amd64
1kata77/sendeb.pl
debian-9-armhf
1kata77/sendeb.pl
debian-9-mips
kata77/sendeb.pl
debian-9-mipsel
Static task
static1
Behavioral task
behavioral1
Sample
kata77/1file.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
kata77/1file.pdf
Resource
win10v2004-20240419-en
Behavioral task
behavioral3
Sample
Documento n.009283949-239949.exe
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
Documento n.009283949-239949.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral5
Sample
kata77/msg.html
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
kata77/msg.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
kata77/sendeb.pl
Resource
ubuntu1804-amd64-20240418-en
Behavioral task
behavioral8
Sample
kata77/sendeb.pl
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral9
Sample
kata77/sendeb.pl
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral10
Sample
kata77/sendeb.pl
Resource
debian9-mipsel-20240226-en
General
-
Target
2014f9fdec7e146fc8e4b0bcb9f60c26_JaffaCakes118
-
Size
349KB
-
MD5
2014f9fdec7e146fc8e4b0bcb9f60c26
-
SHA1
ad7dfd30cbfdbaa0e336988a81a8b137af074fac
-
SHA256
edc4c75c04186f48062503977c148794c37d5f47d60a7ddba12f5a722695bbd1
-
SHA512
8df020b929dc1beecc7517a5a929e2627828918b853beda02bf1ce54bb51c77c07aadb7ee981539522e973fff23ef80bb85a8ba03801f7d4a6a768209eaaf271
-
SSDEEP
6144:qhKXA4ulETGRNkyT1DQxxxFNIgAWpHSfYfus+WqasiAxUC7rOxxMF9XXPEWD8Leh:GWjTTGvkuGfbHgYGZWbsPxUoOkcWDB9V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack003/Documento n.009283949-239949.exe
Files
-
2014f9fdec7e146fc8e4b0bcb9f60c26_JaffaCakes118.gz
-
sample.tar
-
kata77/1file.pdf
-
kata77/Documento n.009283949-239949.zip.zip
-
Documento n.009283949-239949.exe.exe windows:5 windows x86 arch:x86
d96a2444db44426ef1c9167b7e2835df
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MoveFileW
OpenFile
PeekNamedPipe
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReleaseActCtx
RemoveDirectoryA
ReplaceFileA
RtlUnwind
SearchPathA
SetConsoleCtrlHandler
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFileAttributesA
SetFilePointer
SetFileTime
SetHandleCount
SetProcessWorkingSetSize
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
MapViewOfFile
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnlockFile
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WritePrivateProfileSectionA
WriteProcessMemory
_lclose
lstrcatA
lstrcmpA
lstrcmpW
lstrcmpiA
lstrcpyA
lstrcpynA
GetModuleHandleA
GetProcAddress
LockFile
LocalUnlock
LocalSize
LocalReAlloc
LocalLock
LocalFree
LocalFileTimeToFileTime
LocalAlloc
LoadLibraryW
LoadLibraryExA
LCMapStringW
IsValidLocale
IsValidCodePage
IsProcessorFeaturePresent
IsDebuggerPresent
IsDBCSLeadByteEx
IsDBCSLeadByte
IsBadWritePtr
IsBadStringPtrA
IsBadReadPtr
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InitializeCriticalSection
HeapSize
HeapSetInformation
HeapReAlloc
HeapQueryInformation
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalMemoryStatusEx
GlobalMemoryStatus
GlobalHandle
GlobalGetAtomNameW
GlobalFlags
GlobalFindAtomA
GlobalDeleteAtom
GlobalAddAtomW
GlobalAddAtomA
GetWindowsDirectoryA
GetVolumeInformationW
GetVolumeInformationA
GetVersionExA
GetVersion
GetUserDefaultUILanguage
GetUserDefaultLCID
GetTimeZoneInformation
GetTimeFormatW
GetTickCount
GetThreadTimes
GetThreadLocale
GetTempPathA
GetTempFileNameA
GetSystemTimeAsFileTime
GetSystemTime
GetSystemInfo
GetSystemDirectoryW
GetSystemDefaultUILanguage
GetStringTypeW
GetStringTypeExA
GetStdHandle
GetStartupInfoW
GetShortPathNameW
GetShortPathNameA
GetProfileStringA
GetProfileIntA
GetProcessHeap
GetPrivateProfileSectionA
GetOEMCP
GetNumberFormatA
GetModuleHandleW
GetModuleFileNameW
GetLongPathNameA
GetLogicalDriveStringsA
GetLocaleInfoW
GetLocalTime
GetFullPathNameW
GetFullPathNameA
GetFileType
GetFileSizeEx
GetFileSize
GetFileInformationByHandle
GetFileAttributesW
GetFileAttributesExA
GetFileAttributesA
GetExitCodeProcess
GetEnvironmentStringsW
GetDriveTypeW
GetDriveTypeA
GetDiskFreeSpaceExA
GetDiskFreeSpaceA
GetDateFormatW
GetDateFormatA
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
GetConsoleMode
GetConsoleCP
GetComputerNameA
GetCommandLineW
GetCommandLineA
GetCPInfoExW
GetCPInfoExA
GetCPInfo
GetAtomNameA
FreeResource
FreeEnvironmentStringsW
FlushFileBuffers
FindResourceExW
FindResourceA
FindNextFileW
FindNextFileA
FindFirstFileW
FindFirstFileExW
FindFirstFileExA
FindFirstFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FatalAppExitA
ExpandEnvironmentStringsW
ExpandEnvironmentStringsA
ExitThread
ExitProcess
EnumSystemLocalesA
EnumSystemCodePagesW
EnumSystemCodePagesA
EnumResourceLanguagesA
EncodePointer
DuplicateHandle
DeleteFileW
DecodePointer
CreateThread
CreateSemaphoreA
CreateProcessA
CreatePipe
CreateFileW
CreateFileMappingA
CreateDirectoryW
CreateActCtxW
CopyFileA
ConvertDefaultLocale
CompareStringW
CompareStringA
SuspendThread
CompareFileTime
user32
LoadIconA
LoadIconW
gdi32
StartPage
StartDocA
SetWorldTransform
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
SetTextJustification
SetTextColor
SetTextCharacterExtra
SetTextAlign
SetStretchBltMode
SetRectRgn
SetROP2
SetPolyFillMode
SetPixelV
SetPixel
SetPaletteEntries
SetMapperFlags
SetMapMode
SetLayout
SetGraphicsMode
SetDIBColorTable
SetColorAdjustment
SetBrushOrgEx
SetBkMode
SetBkColor
SetArcDirection
SetAbortProc
SelectPalette
SelectObject
SelectClipPath
ScaleWindowExtEx
ScaleViewportExtEx
SaveDC
RoundRect
RestoreDC
RectVisible
RealizePalette
PtVisible
PtInRegion
PolylineTo
Polygon
PolyDraw
PolyBezierTo
PlayMetaFileRecord
PlayMetaFile
PlayEnhMetaFile
PatBlt
OffsetWindowOrgEx
OffsetViewportOrgEx
OffsetRgn
OffsetClipRgn
ModifyWorldTransform
LPtoDP
IntersectClipRect
GetWindowOrgEx
GetWindowExtEx
GetViewportOrgEx
GetViewportExtEx
GetTextMetricsA
GetTextFaceA
GetTextExtentPointA
GetTextExtentPoint32W
GetTextExtentPoint32A
GetTextColor
GetTextCharsetInfo
GetTextAlign
GetSystemPaletteEntries
GetStretchBltMode
GetStockObject
StretchBlt
GetROP2
GetPolyFillMode
GetPixel
GetPaletteEntries
GetObjectType
GetObjectA
GetNearestPaletteIndex
GetNearestColor
GetMapMode
GetLayout
GetFontLanguageInfo
GetDeviceCaps
GetDIBits
GetCurrentPositionEx
GetCurrentObject
GetClipRgn
GetClipBox
GetCharacterPlacementW
GetCharacterPlacementA
GetCharWidthA
GetCharWidth32W
GetCharWidth32A
GetBoundsRect
GetBkMode
GetBkColor
GetBitmapBits
FrameRgn
FillRgn
ExtTextOutW
ExtSelectClipRgn
ExtFloodFill
ExtCreateRegion
ExtCreatePen
ExcludeClipRect
Escape
EnumMetaFile
EnumFontFamiliesExA
EnumFontFamiliesA
EndPage
EndDoc
Ellipse
DeleteObject
DeleteMetaFile
DPtoLP
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgnIndirect
CreatePolygonRgn
CreatePenIndirect
CreatePen
CreatePatternBrush
CreatePalette
CreateMetaFileA
CreateHatchBrush
CreateFontIndirectA
CreateFontA
CreateEllipticRgn
CreateDIBitmap
CreateDIBSection
CreateDIBPatternBrushPt
CreateDCA
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyMetaFileA
CombineRgn
CloseMetaFile
BitBlt
ArcTo
AbortDoc
StretchDIBits
GetRgnBox
UnrealizeObject
advapi32
RegQueryValueExW
RegOpenKeyA
Sections
.text Size: 395KB - Virtual size: 394KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
kata77/files
-
kata77/msg.txt.html
-
kata77/sendeb.pl.pl .sh linux
-
kata77/users