D:\downloads\Архивы\3\sources\vk1261\Release\VKTray.pdb
Static task
static1
Behavioral task
behavioral1
Sample
23a58a7a638055606f1f125abe31a88e_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
23a58a7a638055606f1f125abe31a88e_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
23a58a7a638055606f1f125abe31a88e_JaffaCakes118
-
Size
221KB
-
MD5
23a58a7a638055606f1f125abe31a88e
-
SHA1
5861517febca100acfc6b6a0f9675d332f748dc1
-
SHA256
282a95720be78d8c55d66f9e8d776cdfc8c33994fc63235d75569297371b744a
-
SHA512
6edfeadf84a68228f048877750aba834c2adedb34a75243dc38f3be112e09770b4a03d45032d5bcda427f66ca103f25f420a789475d2a935971fde15a0800ad3
-
SSDEEP
3072:DhFJMFEPfHCCJsqXMhckEjeKCdwJnyHb7t88SDh4dzmDKN:DhDMFEnCCJ3XMakayMnyHbJ8J4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23a58a7a638055606f1f125abe31a88e_JaffaCakes118
Files
-
23a58a7a638055606f1f125abe31a88e_JaffaCakes118.exe windows:6 windows x86 arch:x86
b521fb8d54864252b0ff8bf09513d16f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
HeapFree
HeapReAlloc
GetLastError
GetTickCount
Sleep
CreateProcessW
FindFirstFileW
FindClose
DeleteFileW
GetTempPathW
GetSystemTimeAsFileTime
MoveFileExW
WriteFile
FindResourceW
SizeofResource
LoadResource
LockResource
WaitForSingleObject
CreateMutexW
SetEvent
ExitProcess
FindNextFileW
RemoveDirectoryW
GetVersion
GetCurrentThread
CreateThread
GetCurrentProcessId
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetCurrentProcess
OpenProcess
TerminateProcess
ReadFile
InitializeCriticalSection
CreateDirectoryW
GetShortPathNameW
GetModuleFileNameW
CreateEventW
GetCommandLineW
GetCommandLineA
GetVersionExW
OpenMutexW
WriteConsoleW
SetStdHandle
IsProcessorFeaturePresent
GetConsoleMode
GetConsoleCP
SetFilePointer
GetStringTypeW
MultiByteToWideChar
LCMapStringW
WideCharToMultiByte
RtlUnwind
LoadLibraryW
QueryPerformanceCounter
DeleteCriticalSection
GetFileType
GetFileSize
CloseHandle
GetFileTime
CreateFileW
LeaveCriticalSection
EnterCriticalSection
GetProcessHeap
HeapAlloc
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlushFileBuffers
HeapCreate
GetStdHandle
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetModuleHandleW
GetProcAddress
HeapSize
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
HeapSetInformation
DecodePointer
EncodePointer
user32
LoadIconW
wsprintfW
FindWindowExW
DispatchMessageW
LoadMenuW
GetSubMenu
SetForegroundWindow
GetSystemMetrics
TrackPopupMenuEx
DestroyMenu
MessageBoxW
SendMessageW
SetDlgItemTextW
SetTimer
EndDialog
LoadCursorW
RegisterClassExW
GetCursorPos
DialogBoxParamW
DefWindowProcW
CreateWindowExW
GetMessageW
TranslateMessage
advapi32
LookupPrivilegeValueW
OpenProcessToken
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
AdjustTokenPrivileges
shell32
ShellExecuteExW
Shell_NotifyIconW
SHGetSpecialFolderPathW
ole32
CoCreateInstance
CoInitializeEx
CoUninitialize
CoInitializeSecurity
ws2_32
WSAConnect
WSAStartup
WSAResetEvent
send
ioctlsocket
recv
getaddrinfo
WSACreateEvent
WSAEventSelect
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
WSACloseEvent
closesocket
socket
htons
bind
listen
WSAAccept
wininet
InternetConnectA
HttpOpenRequestA
InternetOpenA
InternetReadFile
HttpQueryInfoA
HttpSendRequestA
InternetCloseHandle
psapi
EnumProcessModules
EnumProcesses
GetModuleBaseNameW
Sections
.text Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 541KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ