d:\MyWork\WorkProjects\NetNucleosProjects\WhereSphere_Rebranding\gabpath\NEW_URLS\Gabpath_only\code\projets\contextuel_popper\exe\src\surf_accuracy\Release_GabPath\GabPath.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0a26d6e464ef3dedc4dbbe3b7cbdf904_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0a26d6e464ef3dedc4dbbe3b7cbdf904_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0a26d6e464ef3dedc4dbbe3b7cbdf904_JaffaCakes118
-
Size
728KB
-
MD5
0a26d6e464ef3dedc4dbbe3b7cbdf904
-
SHA1
8327684550db2059de82f6aface5f60a8e189c25
-
SHA256
c94a6555207504e499167807a80cc2a1361c13ced027cb537cf460fd6ae019de
-
SHA512
dbdda469b15f244b2d51fbf57d3204f53496dbed909b4bb9f140bfa7ee862b3e5a7c27f605853d61a32eef6130d4fd17aef48ef11abc8fd45cb8b1937d197a33
-
SSDEEP
12288:5scSvZuNLiXTEQH1tuB9FEQ7gsG49jXDOAtmZ70PRvl1kTr8RnYwf:5TAZuYAQXZs/9jrmR0PSTrw5f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a26d6e464ef3dedc4dbbe3b7cbdf904_JaffaCakes118
Files
-
0a26d6e464ef3dedc4dbbe3b7cbdf904_JaffaCakes118.exe windows:4 windows x86 arch:x86
14b43e33190c386167bf51f37e850483
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
wininet
InternetGetLastResponseInfoA
shlwapi
SHGetValueA
PathFileExistsA
PathStripToRootA
PathFindExtensionA
PathFindFileNameA
PathIsUNCA
PathRemoveExtensionA
advapi32
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
SetSecurityDescriptorDacl
RegOpenKeyA
RegDeleteKeyA
kernel32
FindClose
FindFirstFileA
GetFullPathNameA
GlobalGetAtomNameA
CreateSemaphoreA
ReleaseSemaphore
InterlockedIncrement
InterlockedDecrement
lstrcmpW
GlobalFindAtomA
GetModuleFileNameW
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
TlsGetValue
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
WritePrivateProfileStringA
GetCurrentDirectoryA
GlobalFlags
SetErrorMode
GetFileAttributesA
GetCPInfo
GetOEMCP
DuplicateHandle
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
GetCommandLineA
GetProcessHeap
GetStartupInfoA
WriteConsoleW
GetFileType
GetStdHandle
ExitThread
CreateThread
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
GetConsoleCP
GetConsoleMode
Sleep
GetACP
GetTimeZoneInformation
LCMapStringA
LCMapStringW
SetHandleCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
DebugBreak
SetStdHandle
GetDriveTypeA
WriteConsoleA
GetConsoleOutputCP
GetStringTypeA
GetStringTypeW
SetEnvironmentVariableA
GetThreadLocale
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
DeleteFileA
GetCurrentProcessId
GlobalAddAtomA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
GlobalDeleteAtom
GetModuleHandleA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
MulDiv
CreateEventA
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
RaiseException
LocalAlloc
SetFilePointer
WriteFile
ReadFile
FreeResource
LocalFree
GetCurrentProcess
SetPriorityClass
DeviceIoControl
CreateMutexA
GetCurrentThreadId
LoadResource
LockResource
SizeofResource
FindResourceA
SetLastError
GetVolumeInformationA
GetTempFileNameA
EnterCriticalSection
LeaveCriticalSection
ExitProcess
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
FreeLibrary
GetVersionExA
LoadLibraryA
GetProcAddress
lstrlenA
lstrcmpiA
WideCharToMultiByte
CompareStringA
CompareStringW
MultiByteToWideChar
InterlockedExchange
GetVersion
DosDateTimeToFileTime
LocalFileTimeToFileTime
CopyFileA
CreateFileA
GetFileTime
CompareFileTime
SystemTimeToFileTime
SetFileTime
CloseHandle
GetTempPathA
GetModuleFileNameA
GetLastError
RtlUnwind
CreateDirectoryA
user32
BeginPaint
EndPaint
DestroyMenu
UnregisterClassA
ShowWindow
IsDialogMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
SetFocus
GetForegroundWindow
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetWindow
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetNextDlgTabItem
EndDialog
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetCursor
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ClientToScreen
LoadCursorA
GetSubMenu
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
SendMessageA
GetKeyState
PeekMessageA
ValidateRect
wsprintfA
GetParent
GetClassNameA
GetSystemMetrics
WaitForInputIdle
EnumThreadWindows
EnumChildWindows
SendMessageTimeoutA
GetClientRect
SetWindowTextA
GetWindowThreadProcessId
BringWindowToTop
EnableWindow
SetParent
SetTimer
PostMessageA
RegisterWindowMessageA
EnumWindows
GetWindowTextA
GetCursorPos
CharUpperA
GetDC
ReleaseDC
GetSysColorBrush
CopyRect
GetDlgItem
gdi32
GetClipBox
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
ExtTextOutA
CreateBitmap
GetDeviceCaps
TextOutA
RectVisible
PtVisible
SetMapMode
RestoreDC
SaveDC
DeleteObject
GetObjectA
SetBkColor
SetTextColor
Escape
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
ole32
CoInitialize
CoCreateInstance
CoGetMalloc
CoUninitialize
CoInitializeEx
CoDisconnectObject
OleRun
oleaut32
LoadTypeLi
SysFreeString
VariantClear
SysAllocString
SysAllocStringLen
VariantCopy
VariantInit
GetErrorInfo
VariantChangeType
SysStringLen
SysAllocStringByteLen
Sections
.text Size: 588KB - Virtual size: 585KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 108KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ