C:\safagaguza-lugomiperokut.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0f5463bdc7a823bf4b60bea67aa9fd5f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0f5463bdc7a823bf4b60bea67aa9fd5f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0f5463bdc7a823bf4b60bea67aa9fd5f_JaffaCakes118
-
Size
584KB
-
MD5
0f5463bdc7a823bf4b60bea67aa9fd5f
-
SHA1
0dcfc6418f2433505de5e106e99d0551a6be2ea4
-
SHA256
960bba69bbb7419f832463bd4e646dcb12b2a236e751cbbd9b2668c4b8a21bd2
-
SHA512
0f92a066a779b3ee0da27d377acafa4e674f89e2ed79352b68b983a2b0f1be6d7996ba7cc685c1d2c37b05a35dc6852fb0f711000585c4d29bd301e1ee0660ee
-
SSDEEP
12288:qsiblIv3c4hKFPWIe5GgXe8rn1lWJL4RVn9u7lZUfV+Gd2zVxcgI1iRPl:qsWlsQe5TXPr1eI8pZ4zQBxlI10l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f5463bdc7a823bf4b60bea67aa9fd5f_JaffaCakes118
Files
-
0f5463bdc7a823bf4b60bea67aa9fd5f_JaffaCakes118.exe windows:5 windows x86 arch:x86
f249badb491e7862c803d80af2d74342
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetCommandLineW
GetLocaleInfoA
LoadResource
HeapAlloc
EndUpdateResourceW
InterlockedDecrement
GetUserDefaultLCID
WaitForSingleObject
AddConsoleAliasW
SetEvent
GetEnvironmentStrings
GlobalAlloc
ReadFileScatter
LeaveCriticalSection
FindNextVolumeW
GetFileAttributesW
WriteConsoleW
CreateActCtxA
GetDevicePowerState
GetProcAddress
VerLanguageNameA
RemoveDirectoryA
FreeUserPhysicalPages
GetProcessId
EnumResourceTypesW
GetModuleFileNameA
GetModuleHandleA
EraseTape
ReleaseMutex
LocalSize
FindFirstVolumeW
FindNextVolumeA
lstrcpyW
CreateFileA
GetCommandLineA
GetStartupInfoA
DeleteCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
SetHandleCount
GetFileType
GetLastError
SetFilePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
WriteConsoleA
GetConsoleOutputCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CloseHandle
user32
GetCursorPos
Exports
Exports
@SetViceVariants@12
Sections
.text Size: 460KB - Virtual size: 460KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 318KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ