C:\dademopuyumi34 jebuwaliyut_japaliv_nomajiv\hamiru.pdb
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_917368c18dca5da70a2ce08f415dce2a4224bcb6d59af20d5791db873d364cad.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_917368c18dca5da70a2ce08f415dce2a4224bcb6d59af20d5791db873d364cad.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_917368c18dca5da70a2ce08f415dce2a4224bcb6d59af20d5791db873d364cad
-
Size
198KB
-
MD5
877d8205339dfa2e4ecfb93d63f7fa23
-
SHA1
3aa8853f92a19679cb10c325a885358713d9a00c
-
SHA256
917368c18dca5da70a2ce08f415dce2a4224bcb6d59af20d5791db873d364cad
-
SHA512
0a410290fad21ded397a6571e996c75f299833087f850cff0fa74cbadf6186a4a281828e6dcee96dcec94eabd28b1ed67c6a883f5f9d5afdacbb08533b7fadc7
-
SSDEEP
3072:LHzWdaO0VDX4runRUEI5lkrcPI1ZeVRL8EuSzgz:LTWdabDXvRrncPI1qNuSzy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_917368c18dca5da70a2ce08f415dce2a4224bcb6d59af20d5791db873d364cad
Files
-
JaffaCakes118_917368c18dca5da70a2ce08f415dce2a4224bcb6d59af20d5791db873d364cad.exe windows:5 windows x86 arch:x86
f249badb491e7862c803d80af2d74342
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetCommandLineW
GetLocaleInfoA
LoadResource
HeapAlloc
EndUpdateResourceW
InterlockedDecrement
GetUserDefaultLCID
WaitForSingleObject
AddConsoleAliasW
SetEvent
GetEnvironmentStrings
GlobalAlloc
ReadFileScatter
LeaveCriticalSection
FindNextVolumeW
GetFileAttributesW
WriteConsoleW
CreateActCtxA
GetDevicePowerState
GetProcAddress
VerLanguageNameA
RemoveDirectoryA
FreeUserPhysicalPages
GetProcessId
EnumResourceTypesW
GetModuleFileNameA
GetModuleHandleA
EraseTape
ReleaseMutex
LocalSize
FindFirstVolumeW
FindNextVolumeA
lstrcpyW
CreateFileA
GetCommandLineA
GetStartupInfoA
DeleteCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
SetHandleCount
GetFileType
GetLastError
SetFilePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
WriteConsoleA
GetConsoleOutputCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CloseHandle
user32
GetCursorPos
Exports
Exports
@SetViceVariants@12
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ