C:\vebatavi\cux\bexinas\wipife\govibup_wazicocejarig8.pdb
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_abf95487064c4fb6b6c0e05e99a9dd70eccc3bb16d83942f43327c077d02090a.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
JaffaCakes118_abf95487064c4fb6b6c0e05e99a9dd70eccc3bb16d83942f43327c077d02090a.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_abf95487064c4fb6b6c0e05e99a9dd70eccc3bb16d83942f43327c077d02090a
-
Size
337KB
-
MD5
d6776b98162419c267c5c4f8bf95ef8b
-
SHA1
cad3f3d2153d960148239f9ce9bebbb1d364a391
-
SHA256
abf95487064c4fb6b6c0e05e99a9dd70eccc3bb16d83942f43327c077d02090a
-
SHA512
1ed3405323520fc4a83339e7df35fa708c26a9bd9c8684864ce95317755d61ad7420b01c94802b4bdda42addb0bfafcaa5fa1738cb735ba934c4e330ccd43789
-
SSDEEP
6144:SCfwTAbCJYL0eE0BWN3RnzWwXy0bnQjEL81Nrv:SCfoAV0eDBq3RnzWwXyhZX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_abf95487064c4fb6b6c0e05e99a9dd70eccc3bb16d83942f43327c077d02090a
Files
-
JaffaCakes118_abf95487064c4fb6b6c0e05e99a9dd70eccc3bb16d83942f43327c077d02090a.exe windows:5 windows x86 arch:x86
3c601bcfcec4678bbeefd6cc4d60711a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
FindFirstChangeNotificationW
GetConsoleAliasesLengthW
TlsGetValue
InterlockedIncrement
ReadConsoleA
GetSystemWindowsDirectoryW
SetHandleInformation
BackupSeek
FreeEnvironmentStringsA
IsBadReadPtr
GetConsoleAliasesLengthA
GetPrivateProfileStringW
CreateActCtxW
ActivateActCtx
GlobalAlloc
GetSystemDirectoryW
LoadLibraryW
ReadConsoleInputA
GetSystemWow64DirectoryW
SetVolumeMountPointA
SetDllDirectoryA
SetConsoleMode
HeapValidate
SetConsoleCursorPosition
VerifyVersionInfoA
GetACP
GetStartupInfoW
GetNamedPipeHandleStateW
GetPrivateProfileIntW
FindFirstFileExA
GetLastError
IsDBCSLeadByteEx
GetCurrentDirectoryW
SetLastError
GetProcAddress
SetFirmwareEnvironmentVariableW
GlobalGetAtomNameA
BuildCommDCBW
OpenWaitableTimerW
WritePrivateProfileStringA
WriteProfileSectionW
SetEnvironmentVariableA
GetModuleFileNameA
GetOEMCP
SetConsoleCursorInfo
CompareStringA
GetFileTime
SetProcessShutdownParameters
SetFileShortNameA
GetVersionExA
GetWindowsDirectoryW
GetSystemTime
TlsFree
GetProfileSectionW
DeleteFileA
LocalFileTimeToFileTime
CloseHandle
ReadFile
GetCommandLineW
HeapSetInformation
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
DecodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
GetModuleFileNameW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedDecrement
GetModuleHandleW
ExitProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsAlloc
TlsSetValue
HeapCreate
WriteFile
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
RtlUnwind
MultiByteToWideChar
GetCPInfo
IsValidCodePage
RaiseException
HeapAlloc
HeapReAlloc
HeapSize
HeapQueryInformation
HeapFree
FlushFileBuffers
SetStdHandle
GetStringTypeW
LCMapStringW
CreateFileW
user32
GetCursorInfo
GetMenuInfo
GetMessagePos
winhttp
WinHttpCloseHandle
Sections
.text Size: 245KB - Virtual size: 245KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 4.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mefas Size: 1024B - Virtual size: 741B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ