dfuicom.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ab6968f667be6f0e96d1daca6c3dac71_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
ab6968f667be6f0e96d1daca6c3dac71_JaffaCakes118
-
Size
118KB
-
MD5
ab6968f667be6f0e96d1daca6c3dac71
-
SHA1
bcb573f1d3961622f5bf22f6957c8893cbb88b7f
-
SHA256
ea3cf9ebeeb189d4262492c2d762361755cc22f5e5a22a6c4ce6c65092a1f6e0
-
SHA512
ec66e203661d3f8cb35a254d44f90136f0ed3d6e70604524f490947a5db57c839aff72d8a51ad527e2fae829a04e0c77b3c6e802bf61717f45b92a6a3c87de5a
-
SSDEEP
3072:2+QLFWoupmny8ZBCkbB/apwNasJgEubNgQfrnMF:2bFVupmnnBCq/apXOgEubNZMF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab6968f667be6f0e96d1daca6c3dac71_JaffaCakes118
Files
-
ab6968f667be6f0e96d1daca6c3dac71_JaffaCakes118.exe windows:4 windows x86 arch:x86
9a270604dfaf1fe8d2c9e5bcbf9ac62e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
DeleteCriticalSection
LoadLibraryW
GetLastError
SetLastError
GetModuleFileNameW
OutputDebugStringA
lstrlenW
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
GlobalUnlock
GlobalLock
LeaveCriticalSection
EnterCriticalSection
InterlockedCompareExchange
lstrcpynW
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
CloseHandle
InitializeCriticalSection
Sleep
GetCurrentThreadId
CreateThread
CreateEventW
SetEvent
GetCommandLineW
GetSystemDirectoryW
LoadLibraryA
RaiseException
GetVersionExW
LocalAlloc
GetVersionExA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersion
GetFileAttributesW
GetModuleHandleA
GetProcAddress
GetModuleHandleW
WaitForSingleObject
user32
PeekMessageW
CharNextW
SendMessageW
SetParent
ShowWindow
CharUpperW
DispatchMessageW
TranslateMessage
CreateWindowExW
DefWindowProcW
EnableWindow
RegisterClassExW
PostThreadMessageW
GetMessageW
advapi32
RegCloseKey
RegOpenKeyExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
RegQueryInfoKeyW
RegEnumKeyExW
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
RegSetValueExW
ole32
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
GetHGlobalFromStream
CreateStreamOnHGlobal
CoUninitialize
CoInitializeEx
CoRevokeClassObject
CoRegisterClassObject
CoInitialize
StringFromGUID2
CoCreateInstance
msvcrt
__wgetmainargs
_controlfp
??1type_info@@UAE@XZ
_onexit
__dllonexit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
memset
_amsg_exit
_wcmdln
_except_handler3
free
malloc
_CxxThrowException
wcslen
__CxxFrameHandler
realloc
_c_exit
_exit
_XcptFilter
_cexit
exit
shlwapi
PathFindExtensionW
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 844B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE