C:\eviceti\Uviheg\Bofu\ivory.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d46a607eb4b3be67f90c8c293b439e4a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d46a607eb4b3be67f90c8c293b439e4a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d46a607eb4b3be67f90c8c293b439e4a_JaffaCakes118
-
Size
852KB
-
MD5
d46a607eb4b3be67f90c8c293b439e4a
-
SHA1
6b3d9e0cc957f02fbf4ba37c56efd17f9df5720c
-
SHA256
9657763a3c3870e7a9a908891f47b07f8c9727b37015b9520fd62abe84fc05a6
-
SHA512
88d4933ffe72dd6c7ab2cd9caf9d3c9d373dde4b0b29cdc8b0cd1ccec1812a135a9d9f4f6c3cf431c3e2726a8f88a4ea0023e9390f2005166c2a340285aaa950
-
SSDEEP
24576:Yv5MGO/ffXmZSTozCdAL/RbdVqliFfbT7:YaGO/ffozCdAL/RbdV2iR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d46a607eb4b3be67f90c8c293b439e4a_JaffaCakes118
Files
-
d46a607eb4b3be67f90c8c293b439e4a_JaffaCakes118.exe windows:4 windows x86 arch:x86
cbea531d5efa42348ba46d7e4758cbae
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FindResourceA
LoadResource
VirtualProtect
WriteConsoleW
SetFileAttributesA
CreateProcessA
RemoveDirectoryA
GetCurrentThreadId
GetDiskFreeSpaceA
HeapFree
HeapAlloc
GetModuleHandleA
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
GetSystemInfo
user32
GetWindowRect
DialogBoxIndirectParamA
CreatePopupMenu
GetSysColorBrush
DefWindowProcA
GetForegroundWindow
CreateDialogIndirectParamA
GetWindowThreadProcessId
GetClientRect
advapi32
RegOpenKeyA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
AllocateAndInitializeSid
FreeSid
OpenProcessToken
StartServiceCtrlDispatcherA
InitializeSecurityDescriptor
RegEnumKeyA
RegSetValueExA
RegisterServiceCtrlHandlerA
SetSecurityDescriptorDacl
SetServiceStatus
LookupPrivilegeValueA
OpenSCManagerA
OpenServiceA
OpenThreadToken
QueryServiceStatus
RegCreateKeyExA
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
RegDeleteKeyA
Sections
.text Size: 228KB - Virtual size: 227KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320KB - Virtual size: 318KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 292KB - Virtual size: 1018KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ