c:\skinhard\Prettycent\PerhapsUnit\BusyPoem\Suitshine\Stick.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3a7141ec999f7e30f9741a95d881fa47ad848439952b27d05e412318bccdc963.dll
Resource
win7-20241023-en
General
-
Target
JaffaCakes118_6f749e35d7f70c86a5d27784a89170a854bae0cfcf5e8d6c2208c815dc1211d7
-
Size
128KB
-
MD5
e8f7d072b2404fd0f4c28cde44ca2fa4
-
SHA1
7efe870515b8f18bfd4287d0379be8d52d77bc0c
-
SHA256
6f749e35d7f70c86a5d27784a89170a854bae0cfcf5e8d6c2208c815dc1211d7
-
SHA512
e3ecf8aafbc881a269ffe6fe4ef27d4eb864dbae3f8b630343df361c28e5ca8dd114d0a73748ad79c97766bd4c82498ed434140356f2315c542110e8a3953b12
-
SSDEEP
3072:SpTGJHueaqoMl5WyH1nGqufyIVABBgHkIXL8F:SpsH2qXzWyVGkISBiH9QF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/3a7141ec999f7e30f9741a95d881fa47ad848439952b27d05e412318bccdc963
Files
-
JaffaCakes118_6f749e35d7f70c86a5d27784a89170a854bae0cfcf5e8d6c2208c815dc1211d7.zip
Password: infected
-
3a7141ec999f7e30f9741a95d881fa47ad848439952b27d05e412318bccdc963.dll windows:4 windows x86 arch:x86
e26339273f9297107144f31a84f18ffb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
CreateFileA
HeapCompact
HeapAlloc
HeapFree
Sleep
CreateProcessA
GetLocalTime
OpenMutexA
HeapWalk
GetModuleFileNameA
GetModuleHandleA
VirtualProtect
GetLastError
DuplicateHandle
GetCurrentProcess
CloseHandle
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
RaiseException
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetFileType
SetStdHandle
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
GetProcAddress
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointer
SetEndOfFile
MultiByteToWideChar
ReadFile
InitializeCriticalSection
HeapSize
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
ole32
OleInitialize
OleUninitialize
Exports
Exports
Perhapsinstant3
Plantreceive
Shortlate4
Sections
.text Size: 116KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ