C:\wugibuxakiwode_xuwet_sadejeruko\32\digiferisi\rivica.pdb
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_e90243b7ed104c75b6b410f51671701b8026263970b2f4527595751d9f9cdb7a.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_e90243b7ed104c75b6b410f51671701b8026263970b2f4527595751d9f9cdb7a.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_e90243b7ed104c75b6b410f51671701b8026263970b2f4527595751d9f9cdb7a
-
Size
834KB
-
MD5
2e451490fb677f99838dbadd4b800863
-
SHA1
4e8f45ce4237d2151c022d090806501b256c216b
-
SHA256
e90243b7ed104c75b6b410f51671701b8026263970b2f4527595751d9f9cdb7a
-
SHA512
00615f17d63fc247e1a067b6719fa7f5f68cc71ae0a09d3fa8b85370f931a83bea7787577e6d369df427987c250e7952ecb4e5199ef408eb2749eafef2fcd68e
-
SSDEEP
12288:YFdF90LaqSSUruy+x84q3fDkk4evV3OwtVJ0l79WJjrY1lM5uUN3unnwQ7:otuyQfk4evIqL0foc1lM5zNgw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_e90243b7ed104c75b6b410f51671701b8026263970b2f4527595751d9f9cdb7a
Files
-
JaffaCakes118_e90243b7ed104c75b6b410f51671701b8026263970b2f4527595751d9f9cdb7a.exe windows:5 windows x86 arch:x86
7cae4bb196b00454ecadbe5dcd99c66d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
FindFirstChangeNotificationW
WriteConsoleOutputCharacterW
SetMailslotInfo
GetConsoleAliasesLengthA
GetConsoleTitleA
LoadLibraryW
InterlockedPopEntrySList
LeaveCriticalSection
WriteConsoleW
GetBinaryTypeA
GetModuleFileNameW
lstrlenW
CreateDirectoryA
GetConsoleAliasesW
GetStdHandle
GetCPInfoExW
GetLastError
UnregisterWait
WriteProfileSectionA
LoadLibraryA
LocalAlloc
SetCalendarInfoW
MoveFileA
SetProcessWorkingSetSize
SetConsoleWindowInfo
GetModuleFileNameA
GetModuleHandleA
FreeEnvironmentStringsW
VirtualProtect
GetFileAttributesExW
LocalFree
FillConsoleOutputCharacterA
HeapSize
GetCommandLineW
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapFree
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
CloseHandle
CreateFileA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
IsProcessorFeaturePresent
HeapReAlloc
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
SetFilePointer
SetEndOfFile
GetProcessHeap
MultiByteToWideChar
ReadFile
LCMapStringW
GetStringTypeW
CreateFileW
winhttp
WinHttpCloseHandle
Sections
.text Size: 680KB - Virtual size: 680KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ