C:\higowemoxufos\tehuzubaw\kok.pdb
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_53e44288e55e4f096aa45b2dbab426984680aa13844fc22a66ca8cea9fc239e0.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
JaffaCakes118_53e44288e55e4f096aa45b2dbab426984680aa13844fc22a66ca8cea9fc239e0.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_53e44288e55e4f096aa45b2dbab426984680aa13844fc22a66ca8cea9fc239e0
-
Size
246KB
-
MD5
e030c51b0ced4c62a924f9e7bbadc75b
-
SHA1
f265f8063c3ddd2d173b88e7be57bffe59e97dae
-
SHA256
53e44288e55e4f096aa45b2dbab426984680aa13844fc22a66ca8cea9fc239e0
-
SHA512
432b0116d1eaf25cca1c1f7317d0ec845e7b948789fd7ba97808a986bbb6bf0396153bff0f4a53ade7e49b6bba13936d296ca374f34fd7ce5f9828c0483a7cb9
-
SSDEEP
3072:/7OwU3TAyXWuXNWZ6ufWKbzTASuqbgdgsF54VggjcGkNIVqIpEVE:MTAyxX+6ueKbzTAIIdM7ITsqUEK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_53e44288e55e4f096aa45b2dbab426984680aa13844fc22a66ca8cea9fc239e0
Files
-
JaffaCakes118_53e44288e55e4f096aa45b2dbab426984680aa13844fc22a66ca8cea9fc239e0.exe windows:5 windows x86 arch:x86
eabb194c814da30562c2ce7e427fcafb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetEnvironmentStrings
GlobalAlloc
LoadLibraryW
GetLocaleInfoW
GetVersionExW
SetConsoleTitleA
GetTempPathW
LCMapStringA
EnumSystemLocalesA
GetStdHandle
GetProcAddress
VirtualAlloc
HeapSize
BeginUpdateResourceW
EnterCriticalSection
LoadLibraryA
InterlockedIncrement
SetCalendarInfoW
MoveFileA
BeginUpdateResourceA
WriteProfileSectionW
SetConsoleWindowInfo
GetModuleFileNameA
GetDefaultCommConfigA
LoadLibraryExA
GetConsoleTitleW
GetFileTime
SetFileValidData
LocalFree
WriteProcessMemory
GetComputerNameA
GetLocaleInfoA
WriteConsoleA
GetVolumeNameForVolumeMountPointA
CreateFileA
SetFilePointer
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetCPInfo
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetLastError
HeapFree
CloseHandle
LeaveCriticalSection
Sleep
ExitProcess
WriteFile
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapReAlloc
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetModuleHandleA
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
RtlUnwind
InitializeCriticalSectionAndSpinCount
GetConsoleOutputCP
WriteConsoleW
user32
WindowFromPoint
gdi32
GetFontUnicodeRanges
winhttp
WinHttpCloseHandle
Sections
.text Size: 161KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ