C:\webigiheliyu\70 koxowudamazu soge_cuduluja\xezaduk.pdb
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_72d639d86f67f7637ebe9041bda4a9cfacdfd600ec8da2998f79d04a95af789d.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
JaffaCakes118_72d639d86f67f7637ebe9041bda4a9cfacdfd600ec8da2998f79d04a95af789d.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_72d639d86f67f7637ebe9041bda4a9cfacdfd600ec8da2998f79d04a95af789d
-
Size
793KB
-
MD5
f897719dd88e95baf1b8652d7df6c41a
-
SHA1
06001655b4915a952f4edf1dd7a89958feffa9d9
-
SHA256
72d639d86f67f7637ebe9041bda4a9cfacdfd600ec8da2998f79d04a95af789d
-
SHA512
46b74e652252b60fcf0c965b3f531a3c34bfabaedfaf26dae391a70965aeb09fc26ac4f471efeb72d891e859df376dff2415f6200cc1ca6a41830ebdb37c5371
-
SSDEEP
24576:pbj25fkVcS4i9+Xjn9savYjke59m2Aep:pbjfIRr9ejke59m2A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_72d639d86f67f7637ebe9041bda4a9cfacdfd600ec8da2998f79d04a95af789d
Files
-
JaffaCakes118_72d639d86f67f7637ebe9041bda4a9cfacdfd600ec8da2998f79d04a95af789d.exe windows:5 windows x86 arch:x86
5b3fe4097ff4841b2226a692c3c67bd5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetFileAttributesExA
GetConsoleAliasesA
GetConsoleAliasesLengthA
GetConsoleTitleA
GlobalAlloc
LoadLibraryW
GetProcessHandleCount
InterlockedPopEntrySList
WriteConsoleW
GetMailslotInfo
GetModuleFileNameW
GetVolumePathNameA
GetShortPathNameA
GetStdHandle
SetLastError
GetLongPathNameA
LoadLibraryA
SetCalendarInfoW
MoveFileA
LockResource
WriteProfileSectionW
SetConsoleWindowInfo
VirtualProtect
GetCPInfoExA
LocalSize
GetFileInformationByHandle
WriteConsoleOutputCharacterA
EnterCriticalSection
FillConsoleOutputCharacterA
CreateFileW
FlushFileBuffers
GetCommandLineW
HeapSetInformation
GetStartupInfoW
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
GetLastError
HeapAlloc
HeapFree
IsProcessorFeaturePresent
LeaveCriticalSection
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
WriteFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RaiseException
RtlUnwind
HeapSize
HeapReAlloc
SetStdHandle
MultiByteToWideChar
LCMapStringW
GetStringTypeW
CloseHandle
gdi32
GetTextExtentExPointA
ole32
OleInitialize
Sections
.text Size: 704KB - Virtual size: 704KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 289KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ