C:\muramipixig\lagec.pdb
Static task
static1
Behavioral task
behavioral1
Sample
90a6e9b13433e201fabe82f254a08df4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
90a6e9b13433e201fabe82f254a08df4_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
90a6e9b13433e201fabe82f254a08df4_JaffaCakes118
-
Size
299KB
-
MD5
90a6e9b13433e201fabe82f254a08df4
-
SHA1
1fc6032c73500529e2cc355851d652040481c79c
-
SHA256
d835f905560e51d7167efff65f542bc492502a510e3c5ea0cbe0aab0f811e5fc
-
SHA512
f63f726b9f9407eabb0a24b27b33c1e2983e45561a6a57d94a30113bae5671c209f07e2f92f3ec9919d83b26477bc441f260a31b21879a6b0d94f66bb7de58eb
-
SSDEEP
6144:1P3Fy5E5Cb0Jh0NlX1aDqjIaQIGmHddI51RbiGLEc:1P3Fy5E80PMzaDqMagWiZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 90a6e9b13433e201fabe82f254a08df4_JaffaCakes118
Files
-
90a6e9b13433e201fabe82f254a08df4_JaffaCakes118.exe windows:5 windows x86 arch:x86
99012338f1bbaabe225761bf7cb06050
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetComputerNameA
FillConsoleOutputCharacterA
GetPrivateProfileSectionNamesW
GetFileSize
SetPriorityClass
WriteConsoleInputW
lstrlenA
GetConsoleAliasesLengthW
TlsGetValue
CommConfigDialogA
FindResourceExW
CallNamedPipeA
SetConsoleTextAttribute
ZombifyActCtx
WritePrivateProfileSectionA
SetEnvironmentVariableW
GetModuleHandleExW
SetHandleInformation
SetComputerNameW
AddConsoleAliasW
SetVolumeMountPointW
CreateDirectoryExA
GetWindowsDirectoryA
EnumTimeFormatsA
WriteFile
ActivateActCtx
ReadConsoleInputA
CopyFileW
GlobalFlags
SetConsoleMode
GetFileAttributesW
WriteConsoleW
IsDBCSLeadByte
CompareStringW
SetThreadPriority
VerifyVersionInfoW
ReleaseActCtx
SetCurrentDirectoryA
SetThreadLocale
GetStdHandle
FindFirstFileExA
GetLastError
GetCurrentDirectoryW
ReadConsoleOutputCharacterA
GetProcAddress
GetProcessHeaps
VirtualAlloc
MoveFileW
WriteProfileSectionA
LoadLibraryA
OpenMutexA
ProcessIdToSessionId
OpenWaitableTimerW
LocalAlloc
DnsHostnameToComputerNameA
SetFileApisToANSI
AddAtomA
GlobalWire
SetConsoleCursorInfo
DebugSetProcessKillOnExit
SetConsoleTitleW
ContinueDebugEvent
FreeEnvironmentStringsW
BuildCommDCBA
CompareStringA
GetCurrentThreadId
SetProcessShutdownParameters
OpenSemaphoreW
GetVersionExA
LocalSize
FindAtomW
FindActCtxSectionStringW
OpenFileMappingA
GlobalReAlloc
GetProfileSectionW
GetVolumeInformationW
FlushFileBuffers
CloseHandle
CreateFileW
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
DeleteFileA
MultiByteToWideChar
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetModuleFileNameW
HeapValidate
IsBadReadPtr
RaiseException
RtlUnwind
IsProcessorFeaturePresent
GetModuleHandleW
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
TlsAlloc
TlsSetValue
TlsFree
SetLastError
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
OutputDebugStringA
OutputDebugStringW
LoadLibraryW
HeapAlloc
HeapReAlloc
HeapSize
HeapQueryInformation
HeapFree
GetStringTypeW
SetFilePointer
GetConsoleCP
GetConsoleMode
LCMapStringW
SetStdHandle
user32
GetMenuBarInfo
GetComboBoxInfo
Sections
.text Size: 184KB - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ