C:\dizujumut wahuviwovo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_8edae54f83c18181a59573cd13983e17cd9877a713e127e358a8d8a76266dbb9.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_8edae54f83c18181a59573cd13983e17cd9877a713e127e358a8d8a76266dbb9.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_8edae54f83c18181a59573cd13983e17cd9877a713e127e358a8d8a76266dbb9
-
Size
757KB
-
MD5
ecbe71acc090c1bb8e77118f01f6c2b9
-
SHA1
ba7d46467e5da6176db5df8f74cc905391d806fd
-
SHA256
8edae54f83c18181a59573cd13983e17cd9877a713e127e358a8d8a76266dbb9
-
SHA512
e54c6f08eef65cf1629ad88e660230215c9c8583b9fb93190cece199aa88bbe1fd60a940ee9ae6656e370c3eec5bab69cfcd2ca7c029be31c7b73ca9085719cf
-
SSDEEP
12288:GneHdHA9ep0dkhbl6+NQ/d/ms/cju+nad/v8Wvf9GYxfDwOMO+9+C1JMbk45+Hk:jHJpCWzN+/Venad/v8Wv6OL+9bgk45+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_8edae54f83c18181a59573cd13983e17cd9877a713e127e358a8d8a76266dbb9
Files
-
JaffaCakes118_8edae54f83c18181a59573cd13983e17cd9877a713e127e358a8d8a76266dbb9.exe windows:5 windows x86 arch:x86
b5ed08b2cfa8bca18be73ecb1977b6f2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
FindNextVolumeA
HeapWalk
GetNamedPipeHandleStateW
SystemTimeToFileTime
FillConsoleOutputCharacterA
CreateMailslotA
TerminateProcess
GetLastError
GetVersionExA
FreeResource
EnumResourceNamesA
FindNextFileA
CopyFileExW
BuildCommDCBA
SetDefaultCommConfigA
SetCommConfig
WritePrivateProfileStructW
LocalCompact
ChangeTimerQueueTimer
ReadConsoleInputW
WriteConsoleInputW
LoadResource
AddAtomW
SearchPathW
GetThreadTimes
CallNamedPipeW
GetDriveTypeA
BuildCommDCBAndTimeoutsA
VirtualProtect
LoadLibraryA
GlobalAlloc
SetThreadIdealProcessor
GetProfileSectionW
DeleteFileW
FindFirstChangeNotificationA
VerifyVersionInfoA
FormatMessageW
SetDllDirectoryW
GetModuleHandleA
WritePrivateProfileStringW
GetUserDefaultLCID
SetWaitableTimer
SetConsoleTextAttribute
InterlockedDecrement
GetStartupInfoW
GetSystemWow64DirectoryA
CopyFileA
SetLastError
SetCalendarInfoA
ContinueDebugEvent
EndUpdateResourceW
FreeLibraryAndExitThread
GetModuleFileNameW
FatalAppExitA
GetSystemTime
OpenFileMappingW
SetLocaleInfoW
WriteFileGather
FlushConsoleInputBuffer
DisableThreadLibraryCalls
InterlockedExchangeAdd
GlobalUnfix
GetSystemWindowsDirectoryW
GetACP
GlobalFindAtomA
lstrcatW
GetPrivateProfileStringW
SetMailslotInfo
CreateActCtxW
GetPrivateProfileIntW
_lwrite
OutputDebugStringW
CreateNamedPipeW
SetThreadAffinityMask
SetConsoleActiveScreenBuffer
EnumResourceTypesW
lstrlenA
DebugActiveProcess
WriteConsoleW
GetProcAddress
lstrcpyA
ReadConsoleOutputW
GetThreadContext
BuildCommDCBW
ReleaseActCtx
GetStringTypeA
GetPrivateProfileStringA
GetFileAttributesExA
LocalFileTimeToFileTime
MoveFileW
GetVolumePathNameW
EnumDateFormatsA
ProcessIdToSessionId
GetQueuedCompletionStatus
AllocConsole
GlobalGetAtomNameA
SetComputerNameA
GetConsoleAliasExesLengthA
SystemTimeToTzSpecificLocalTime
MoveFileWithProgressA
GetStringTypeExW
EnumSystemLocalesA
GetPrivateProfileIntA
GetModuleHandleW
OpenWaitableTimerA
GetConsoleAliasesLengthW
PeekNamedPipe
GetCompressedFileSizeW
FindNextVolumeMountPointA
WriteConsoleOutputCharacterA
EnumDateFormatsW
TerminateJobObject
GetConsoleAliasExesW
lstrcmpW
OpenMutexA
RaiseException
GetCommandLineA
GetStartupInfoA
HeapValidate
IsBadReadPtr
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
InterlockedIncrement
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
HeapDestroy
HeapCreate
HeapFree
VirtualFree
WriteFile
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
GetOEMCP
GetCPInfo
IsValidCodePage
RtlUnwind
InitializeCriticalSectionAndSpinCount
DebugBreak
OutputDebugStringA
LoadLibraryW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeW
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateFileA
CloseHandle
FlushFileBuffers
advapi32
InitiateSystemShutdownA
Sections
.text Size: 147KB - Virtual size: 147KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 589KB - Virtual size: 752KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ