C:\ten\gemi\cababe figuhu vixagafun93\pituzehomedak\dofawa.pdb
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_4ff0ce248a8fd30a195cc7cf0709b02c42364d30ec800f7abdff92a74417d011.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_4ff0ce248a8fd30a195cc7cf0709b02c42364d30ec800f7abdff92a74417d011.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_4ff0ce248a8fd30a195cc7cf0709b02c42364d30ec800f7abdff92a74417d011
-
Size
213KB
-
MD5
5c50519f8123fd804b2e8d74337022e6
-
SHA1
b862cfa9f1b20d1acceb43fc2ef3a788464265c2
-
SHA256
4ff0ce248a8fd30a195cc7cf0709b02c42364d30ec800f7abdff92a74417d011
-
SHA512
6e362bb25221c74c955a228a30549bd22212932b81aa4ce26c26edf771227cbee0ffea2c3d9095ed4b801843a36744d7aa0f19c16786d7624d4688f12094f2ac
-
SSDEEP
3072:H7Zt0dLUdxVjd6XsHD1brlFgYodllBgB839E/ZVStsxkgaBChopZa9uD6Vdyhkb:Vt0edxVd6XUDVxu1r39WfigaTwVf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_4ff0ce248a8fd30a195cc7cf0709b02c42364d30ec800f7abdff92a74417d011
Files
-
JaffaCakes118_4ff0ce248a8fd30a195cc7cf0709b02c42364d30ec800f7abdff92a74417d011.exe windows:5 windows x86 arch:x86
52f3cbaa89ec222f54fb6ad33fd12ebf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetDefaultCommConfigW
LoadResource
GetSystemWindowsDirectoryW
QueryPerformanceCounter
GetEnvironmentStringsW
SetConsoleScreenBufferSize
BackupSeek
GetTickCount
GetProcessHeap
GetSystemTimeAsFileTime
ReadConsoleW
GetFirmwareEnvironmentVariableA
GetProcessHandleCount
InitAtomTable
HeapValidate
HeapCompact
WriteConsoleW
DeactivateActCtx
LCMapStringA
GetConsoleOutputCP
SetLastError
GetProcAddress
VirtualAlloc
BeginUpdateResourceW
GetAtomNameA
LoadLibraryA
LocalAlloc
GetModuleFileNameA
GetConsoleCursorInfo
DeleteAtom
AddConsoleAliasA
FindNextVolumeA
lstrcpyW
CommConfigDialogW
SetProcessAffinityMask
CreateFileW
GetLastError
HeapReAlloc
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
IsProcessorFeaturePresent
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
SetFilePointer
HeapCreate
HeapFree
CloseHandle
LoadLibraryW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
WideCharToMultiByte
GetCurrentProcessId
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
RaiseException
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
LCMapStringW
MultiByteToWideChar
GetStringTypeW
user32
ShowCursor
advapi32
AdjustTokenGroups
Sections
.text Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ