HWGvwGetUserDefaultUILanguagegw.pdb
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
e458363303a19407c5251c3de64df270_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e458363303a19407c5251c3de64df270_JaffaCakes118
-
Size
1.2MB
-
MD5
e458363303a19407c5251c3de64df270
-
SHA1
e3171a37e8e8fe61e68c2cb80fa2c35a59d1d05e
-
SHA256
09fd889760c254f9ce2438e5d084e32a1c0116a83d3df8e05eea382d3fe27fdb
-
SHA512
58908d322e20c8f29f3ee3c89c783374a27f35720748a21f0aef1a6922316015a5e77485cffcd7ff1f89c819b6cf0d09357dcfb71f20bae791f25c14729c01b3
-
SSDEEP
12288:i/koUn+KOkzRquIXFdj1eeqIKMFAMxAZ1AOs:i/fmNQIlIK8gDAF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e458363303a19407c5251c3de64df270_JaffaCakes118
Files
-
e458363303a19407c5251c3de64df270_JaffaCakes118.exe windows:5 windows x86 arch:x86
b50378adf0608ee81ce29f564004c691
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
AnyPopup
GetComboBoxInfo
GetDlgCtrlID
EnumDisplayMonitors
gdi32
GetRandomRgn
LineTo
GetTextCharsetInfo
advapi32
EnumServicesStatusA
kernel32
GetNamedPipeClientSessionId
FlsFree
FlsGetValue
HeapAlloc
GetBinaryTypeA
GetShortPathNameW
FillConsoleOutputAttribute
GetUserDefaultLCID
GetBinaryTypeW
lstrlenW
VirtualAlloc
GetProcessHeap
GetLocalTime
GetUserDefaultUILanguage
GetCurrentDirectoryA
HeapFree
GetCurrentProcessorNumber
GetCommandLineA
GetSystemTime
GetFileType
InitializeCriticalSection
Sections
.text Size: 800KB - Virtual size: 798KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.code Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 440KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 956B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ