C:\manacan\puvu.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e1e65f9c773cc00d08dda0f9971fbb971c033d32382bdd1a59194adcde2c3e7e.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1e65f9c773cc00d08dda0f9971fbb971c033d32382bdd1a59194adcde2c3e7e.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_d6d6581e266a3f1d371dd4ddff0240e50b9aeee252373b15caad66eecacb873b
-
Size
164KB
-
MD5
3b03a74a060d81bc5f249914436cf9b2
-
SHA1
cdd3fa6edb335c7c6937ef85f3f2607a4ddaac71
-
SHA256
d6d6581e266a3f1d371dd4ddff0240e50b9aeee252373b15caad66eecacb873b
-
SHA512
f8c1da2d036b11ed887e18e3141e91376bb0d90d09b28423d944b079aabef85f8da49abcaec13c7017f95880eaedec834ada04f8bac59adeb8309a4042a10297
-
SSDEEP
3072:1Grofl0FEH2fqwNhmS/PA7KlmrNQvBY8nsApTzkQwq2KlT3gc:EoflCEoqg8SwKlmr6JWMfkQ/TB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/e1e65f9c773cc00d08dda0f9971fbb971c033d32382bdd1a59194adcde2c3e7e
Files
-
JaffaCakes118_d6d6581e266a3f1d371dd4ddff0240e50b9aeee252373b15caad66eecacb873b.zip
Password: infected
-
e1e65f9c773cc00d08dda0f9971fbb971c033d32382bdd1a59194adcde2c3e7e.exe windows:5 windows x86 arch:x86
9aeb2463a45e44e4b568bf1d36aa5947
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
ExitProcess
GetComputerNameA
SetInformationJobObject
FindFirstChangeNotificationW
lstrlenA
CopyFileExW
TlsGetValue
SetLocalTime
CommConfigDialogA
FreeLibrary
SetDllDirectoryW
InterlockedIncrement
InterlockedDecrement
ZombifyActCtx
SetFirmwareEnvironmentVariableA
SetEnvironmentVariableW
GetNamedPipeHandleStateA
SetVolumeMountPointW
OpenSemaphoreA
OutputDebugStringW
GetTickCount
GetProcessHeap
GetConsoleAliasesLengthA
GetConsoleTitleA
ReadConsoleW
CreateRemoteThread
CreateActCtxW
TlsSetValue
GetConsoleCP
GetPrivateProfileIntA
LoadLibraryW
GetConsoleMode
TerminateThread
CopyFileW
GetCalendarInfoA
LeaveCriticalSection
GlobalFlags
HeapValidate
CreateSemaphoreA
GetModuleFileNameW
CompareStringW
CreateJobObjectA
VerifyVersionInfoW
SetCurrentDirectoryA
FindFirstFileA
GetLastError
GetProcAddress
GetLongPathNameA
HeapSize
BackupWrite
VerLanguageNameA
CreateNamedPipeA
SearchPathA
GetNumaHighestNodeNumber
GetPrivateProfileStringA
LoadLibraryA
ProcessIdToSessionId
LocalAlloc
GetFileType
WritePrivateProfileStringA
BuildCommDCBAndTimeoutsW
GetVolumePathNamesForVolumeNameA
GetModuleFileNameA
FindNextFileA
WriteProfileStringA
GetModuleHandleA
FindFirstChangeNotificationA
GetProcessShutdownParameters
FreeEnvironmentStringsW
WriteProfileStringW
BuildCommDCBA
GetConsoleCursorInfo
FindFirstVolumeA
GetVersionExA
TlsAlloc
ReadConsoleOutputCharacterW
GetSystemTime
TlsFree
GetProfileSectionW
EncodePointer
DecodePointer
GetCommandLineW
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsBadReadPtr
IsProcessorFeaturePresent
GetModuleHandleW
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetLastError
HeapCreate
WriteFile
SetFilePointer
WideCharToMultiByte
EnterCriticalSection
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
OutputDebugStringA
WriteConsoleW
HeapAlloc
HeapReAlloc
HeapQueryInformation
HeapFree
RtlUnwind
SetStdHandle
MultiByteToWideChar
GetStringTypeW
LCMapStringW
RaiseException
CreateFileW
CloseHandle
FlushFileBuffers
Sections
.text Size: 235KB - Virtual size: 234KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 39.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wuhaz Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xic Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ragejuh Size: 512B - Virtual size: 234B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ