D:\Iwuny\Fic\Hepuzec.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b2392ae106a1769bf43bc63f77a75e1f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b2392ae106a1769bf43bc63f77a75e1f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b2392ae106a1769bf43bc63f77a75e1f_JaffaCakes118
-
Size
164KB
-
MD5
b2392ae106a1769bf43bc63f77a75e1f
-
SHA1
a6f48f76366bf64473d64f484729756ad5b178ea
-
SHA256
b05a48b8c1a25d7a7b83ed285d9bf76da85eab4bc02d2556d4036753bb096366
-
SHA512
559f0f9cc4ec1c534f93df10c754119b34b1d941e11eee6d489c634530a65ae3915972ec68e197691d5b737134d903bac94887ee584a2529f2c3c98f5801b688
-
SSDEEP
3072:9mAIZo43BA0tvVO9iyO5hiZrc+kjlVmB77UlPg1qKUnRJr:qo4CoOA75IZrJtBHGPg1nsRJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2392ae106a1769bf43bc63f77a75e1f_JaffaCakes118
Files
-
b2392ae106a1769bf43bc63f77a75e1f_JaffaCakes118.exe windows:4 windows x86 arch:x86
dc93e6463997991ee0aaf561afe30160
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
IsDialogMessageA
LoadBitmapA
CheckDlgButton
SetWindowTextA
GetIconInfo
SetFocus
RegisterClassExA
GetKeyNameTextA
GetWindowTextLengthA
GetClassInfoExA
CallWindowProcA
GetMessageA
GetCursorPos
GetFocus
AppendMenuA
SetClipboardData
DestroyWindow
SendMessageA
GetClipboardData
SendDlgItemMessageA
CheckRadioButton
SetForegroundWindow
SetDlgItemInt
InsertMenuItemA
SetCursor
ShowScrollBar
GetDlgItemInt
cabinet
ord13
ord10
ord11
ord12
ord14
ddraw
DirectDrawCreateClipper
DirectDrawCreate
kernel32
ReadFile
SetEndOfFile
HeapSize
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
VirtualQuery
InterlockedExchange
LCMapStringA
GetCPInfo
GetOEMCP
GetACP
LoadLibraryA
CreateFileA
FlushFileBuffers
SetStdHandle
IsBadWritePtr
HeapReAlloc
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
RtlUnwind
CloseHandle
GetProfileStringW
GetEnvironmentVariableA
SetEvent
ResetEvent
WaitForSingleObject
CreateEventA
GetSystemTimeAsFileTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
GetLastError
WriteFile
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
SetFilePointer
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
VirtualAlloc
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 684KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE