C:\Users\Кирилл\Desktop\VENOMREBLD\Release\VENOM REBUILD.pdb
Static task
static1
Behavioral task
behavioral1
Sample
autocracker.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
autocracker.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
venomhack.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
venomhack.dll
Resource
win10v2004-20240508-en
General
-
Target
65e75f726e964346be42621cff1ae177_JaffaCakes118
-
Size
221KB
-
MD5
65e75f726e964346be42621cff1ae177
-
SHA1
dd2337f35fbc89249a2689566aa7563c2ecb640b
-
SHA256
6391d9429f6e18917d57aba1e4f4de3a8fbc2c7cb8629cb664d4af60065774ed
-
SHA512
6f6a2428e73fd0ded82d8018fba6c7d02895215f2db52d023292401526a9e97ce1ce90186e5d9cd21bb3cbf3f29c79b128461a16810f1c7267b73dcfce6f3cac
-
SSDEEP
6144:sPXj2vb4M7kAUZ7vzJLj6ITOVYIER7O6WynKFZ0xDHC0:s7ckM7e15baViO6WyTF
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/autocracker.asi unpack001/venomhack.asi
Files
-
65e75f726e964346be42621cff1ae177_JaffaCakes118.rar
-
autocracker.asi.dll windows:6 windows x86 arch:x86
e9702564debad96251b95cce71ac6503
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleFileNameA
Sleep
DisableThreadLibraryCalls
LoadLibraryA
CloseHandle
SetFileAttributesA
GetProcAddress
FreeLibrary
GetModuleHandleA
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
msvcp140
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Xlength_error@std@@YAXPBD@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
vcruntime140
memmove
memcpy
memchr
__CxxFrameHandler3
__std_type_info_destroy_list
strstr
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memset
_except_handler4_common
api-ms-win-crt-heap-l1-1-0
_callnewh
realloc
free
malloc
api-ms-win-crt-runtime-l1-1-0
_beginthread
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
venomhack.asi.dll windows:6 windows x86 arch:x86
641824ceccaf5e1c16f992ab2fd88329
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
LoadLibraryA
VirtualProtect
MultiByteToWideChar
OutputDebugStringA
Sleep
GlobalFree
GlobalLock
GlobalUnlock
QueryPerformanceFrequency
QueryPerformanceCounter
GetVolumeInformationA
WritePrivateProfileStringA
CreateThread
GetPrivateProfileStringA
GetTickCount
GetModuleHandleA
InterlockedCompareExchange
GetCurrentProcess
GetCurrentThreadId
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualAlloc
GetCurrentThread
VirtualQuery
SetLastError
GetModuleHandleW
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
IsDebuggerPresent
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
GetSystemDirectoryA
GlobalAlloc
VirtualFree
GetPhysicallyInstalledSystemMemory
GetLastError
user32
GetClientRect
SetCapture
ClientToScreen
GetCapture
GetActiveWindow
ScreenToClient
GetKeyState
ReleaseCapture
SetCursorPos
mouse_event
CallWindowProcA
SetWindowLongA
GetSystemMetrics
SetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
GetCursorPos
GetClipboardData
GetKeyboardState
shell32
ShellExecuteA
msvcp140
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??Bid@locale@std@@QAEIXZ
_Cnd_signal
?_Throw_Cpp_error@std@@YAXH@Z
?_Throw_C_error@std@@YAXH@Z
_Mtx_lock
_Cnd_do_broadcast_at_thread_exit
_Cnd_destroy
_Cnd_wait
_Mtx_init
_Thrd_start
_Thrd_detach
_Mtx_destroy
_Cnd_init
_Mtx_unlock
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?uncaught_exception@std@@YA_NXZ
?_Xbad_alloc@std@@YAXXZ
?_Xinvalid_argument@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?id@?$ctype@D@std@@2V0locale@2@A
?_Xlength_error@std@@YAXPBD@Z
wininet
HttpSendRequestA
InternetConnectA
InternetReadFile
InternetCloseHandle
InternetOpenA
HttpOpenRequestA
d3dx9_43
D3DXCreateFontIndirectA
imm32
ImmSetCompositionWindow
ImmGetContext
ImmReleaseContext
vcruntime140
memmove
memchr
__CxxFrameHandler3
__std_exception_destroy
__RTDynamicCast
__std_type_info_destroy_list
_CxxThrowException
_except_handler4_common
memset
memcpy
strchr
strstr
_purecall
__std_terminate
__std_exception_copy
api-ms-win-crt-utility-l1-1-0
qsort
rand
ldiv
api-ms-win-crt-string-l1-1-0
strncpy
isalnum
strcat_s
_stricmp
strcmp
strncmp
isprint
api-ms-win-crt-runtime-l1-1-0
_crt_atexit
_execute_onexit_table
_cexit
terminate
_endthread
_register_onexit_function
_initterm_e
_errno
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
ftell
fread
__stdio_common_vsprintf_s
fclose
fopen
__stdio_common_vsscanf
__stdio_common_vsprintf
_getcwd
_wfopen
fflush
__stdio_common_vfprintf
fwrite
fseek
api-ms-win-crt-convert-l1-1-0
_itoa_s
strtol
atof
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-heap-l1-1-0
free
_callnewh
malloc
realloc
api-ms-win-crt-math-l1-1-0
_CIfmod
_CIatan2
floor
ceil
_libm_sse2_tan_precise
_libm_sse2_sqrt_precise
_libm_sse2_sin_precise
_fdtest
_libm_sse2_pow_precise
_except1
_libm_sse2_cos_precise
Sections
.text Size: 391KB - Virtual size: 390KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 185KB - Virtual size: 419KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ