C:\loligoceze_dikalosoweg.pdb
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_b52d830b3fc856cc40c8c061fc594dbf22cacf7bb440e159f0a61737abc7592a.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
JaffaCakes118_b52d830b3fc856cc40c8c061fc594dbf22cacf7bb440e159f0a61737abc7592a.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_b52d830b3fc856cc40c8c061fc594dbf22cacf7bb440e159f0a61737abc7592a
-
Size
212KB
-
MD5
1312ee3ef6696123f14c35e1bcaf57e9
-
SHA1
701d67afbdbd1dc90321b4e4f6be95566aa83d52
-
SHA256
b52d830b3fc856cc40c8c061fc594dbf22cacf7bb440e159f0a61737abc7592a
-
SHA512
94e4493e4776c76b2748d7a93064020dd001ab533b1f48aa738d884f9ff8967bdd01d778f803edce5ececbcd47f18acdbb1f4360f68aff575a742731dcb30967
-
SSDEEP
6144:ZN0TNRkdq8G+ZYdX/2+VxjKFW7ITsquwVf:D0T7kdq8EdXres7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_b52d830b3fc856cc40c8c061fc594dbf22cacf7bb440e159f0a61737abc7592a
Files
-
JaffaCakes118_b52d830b3fc856cc40c8c061fc594dbf22cacf7bb440e159f0a61737abc7592a.exe windows:5 windows x86 arch:x86
149977303cbb8d29a979e3e74fa868a1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetDefaultCommConfigW
LoadResource
GetSystemWindowsDirectoryW
QueryPerformanceCounter
GetEnvironmentStringsW
SetConsoleScreenBufferSize
BackupSeek
GetTickCount
GetProcessHeap
GetSystemTimeAsFileTime
ReadConsoleW
SetFileShortNameW
GetProcessHandleCount
InitAtomTable
SetConsoleCP
DeleteVolumeMountPointW
HeapValidate
WriteConsoleW
DeactivateActCtx
LCMapStringA
SetLastError
GetProcAddress
VirtualAlloc
BeginUpdateResourceW
GetFirmwareEnvironmentVariableW
VirtualAllocEx
GetAtomNameA
LoadLibraryA
LocalAlloc
GetModuleFileNameA
GetConsoleCursorInfo
DeleteAtom
FindNextVolumeA
lstrcpyW
CommConfigDialogW
CreateFileW
GetLastError
HeapReAlloc
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
IsProcessorFeaturePresent
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
SetFilePointer
HeapCreate
HeapFree
CloseHandle
LoadLibraryW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
WideCharToMultiByte
GetCurrentProcessId
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
RaiseException
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
LCMapStringW
MultiByteToWideChar
GetStringTypeW
user32
ShowCursor
advapi32
AdjustTokenGroups
Sections
.text Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ