C:\xehemo-mop96\rowokehoz\woxuzit\luker\p.pdb
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_621af9ea3a44e4fab71237e384a0ca3808339d2d566a1b0144af74fe9d48bd02.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_621af9ea3a44e4fab71237e384a0ca3808339d2d566a1b0144af74fe9d48bd02.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_621af9ea3a44e4fab71237e384a0ca3808339d2d566a1b0144af74fe9d48bd02
-
Size
220KB
-
MD5
5c43af858cebe82b1ad78c645061cc44
-
SHA1
5babb64955d52797a58604a9aef14d689e90d35f
-
SHA256
621af9ea3a44e4fab71237e384a0ca3808339d2d566a1b0144af74fe9d48bd02
-
SHA512
2d2c7e9483b0b13dd8cabbbc5d1218fe0acdac78f1c676c8fc302e91c3d11cf44ea5f2c3ea53bbfa125e60769f1c99b0da9e27fc05c7f2a743116915aec39c60
-
SSDEEP
3072:IUlCE+24yRwiP95GXu0bJ/rWrxpzbgqru+sxkgaBChmx/LI03qbN:ZV+Tybjijuzbgwu7igaQk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_621af9ea3a44e4fab71237e384a0ca3808339d2d566a1b0144af74fe9d48bd02
Files
-
JaffaCakes118_621af9ea3a44e4fab71237e384a0ca3808339d2d566a1b0144af74fe9d48bd02.exe windows:5 windows x86 arch:x86
9e3ac2424cecff905bdab3e7336b91cb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
SetThreadContext
WriteConsoleOutputCharacterW
GetDefaultCommConfigW
HeapAlloc
UpdateResourceA
HeapFree
GetEnvironmentStringsW
BackupSeek
GetTickCount
GlobalAlloc
LoadLibraryW
SizeofResource
GetTapePosition
SetConsoleCursorPosition
WriteConsoleW
GetAtomNameW
LCMapStringA
GetLastError
GetProcAddress
VirtualAlloc
GetFirmwareEnvironmentVariableW
LoadLibraryA
WriteConsoleA
BeginUpdateResourceA
GetModuleFileNameA
SetConsoleCursorInfo
AddConsoleAliasA
FindNextVolumeA
lstrcpyA
SetProcessAffinityMask
CreateFileW
GetStringTypeW
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
RtlUnwind
SetHandleCount
GetFileType
DeleteCriticalSection
SetFilePointer
CloseHandle
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
FreeEnvironmentStringsW
WideCharToMultiByte
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
Sleep
CreateFileA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers
HeapSize
HeapReAlloc
SetEndOfFile
GetProcessHeap
MultiByteToWideChar
ReadFile
LCMapStringW
user32
GetCursorPos
advapi32
NotifyChangeEventLog
Sections
.text Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ