d:\CVSROOT\drweb-cureit-starter\Release\cureit_starter.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b7350e1c131a2f52485a3b96154315cf_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b7350e1c131a2f52485a3b96154315cf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b7350e1c131a2f52485a3b96154315cf_JaffaCakes118
-
Size
1.0MB
-
MD5
b7350e1c131a2f52485a3b96154315cf
-
SHA1
06ec8fc6780bb629fa6350579929322025273c5a
-
SHA256
c00d1b734fde404a925daa2702475fdc76d6aaae223844cbc20c1acf5121d88a
-
SHA512
bfa805e74dd894cec5defc1269e6513bad655d3c02e33cadafe799a10560e4eb09771e78ed6b65d2e26c5efa4656d81912e47c16400e207656a2853ccb91b2e8
-
SSDEEP
24576:lR0vYNcfK9umEJl3HTLNIhr2OP+i1NXS0r18WD:j0vYNcfKS3TL2hrLP/C0r11
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7350e1c131a2f52485a3b96154315cf_JaffaCakes118
Files
-
b7350e1c131a2f52485a3b96154315cf_JaffaCakes118.exe windows:5 windows x86 arch:x86
73ce040bc5f4d9d47272e2d1bc2af8b4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
lstrlenW
GetTickCount
GetTempPathW
GetLongPathNameW
CreateDirectoryW
FindFirstFileW
FindNextFileW
FindClose
RemoveDirectoryW
SetFileAttributesW
GetProcAddress
GetLastError
GetSystemDirectoryW
MapViewOfFile
CreateFileMappingW
GetFileSize
WideCharToMultiByte
MultiByteToWideChar
DeviceIoControl
CreateFileW
GetWindowsDirectoryW
LoadLibraryW
DosDateTimeToFileTime
GetCurrentDirectoryA
SystemTimeToFileTime
GetFileType
CreateFileA
GetCurrentProcess
ReadFile
SetFilePointer
WriteFile
DeleteFileW
UnmapViewOfFile
HeapAlloc
GetProcessHeap
HeapFree
SetLastError
Sleep
CreateFileMappingA
GetVersion
CreateThread
CopyFileW
GetFileAttributesW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
HeapSize
ExitProcess
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
CreateProcessW
SetEvent
GetModuleFileNameW
CloseHandle
WaitForSingleObject
GetCurrentThreadId
GetModuleHandleW
CreateEventW
ExpandEnvironmentStringsW
GetUserDefaultLangID
advapi32
CreateServiceW
StartServiceW
OpenSCManagerW
OpenServiceW
QueryServiceStatus
CloseServiceHandle
RegCreateKeyExW
RegSetValueExW
DeleteService
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
RegDeleteKeyW
RegEnumKeyExW
RegCloseKey
RegOpenKeyExW
gdi32
GetTextAlign
TextOutW
SetBkMode
SetTextColor
BitBlt
GetStockObject
SetDCBrushColor
CreateCompatibleBitmap
DeleteDC
DeleteObject
SelectObject
CreateDIBSection
CreateCompatibleDC
SetTextAlign
Sections
.text Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 290KB - Virtual size: 289KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ