C:\safuvelun37_sufelazeri.pdb
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_450f776d1da2bc4ed3f7638282f4c518.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_450f776d1da2bc4ed3f7638282f4c518.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_450f776d1da2bc4ed3f7638282f4c518
-
Size
10.6MB
-
MD5
450f776d1da2bc4ed3f7638282f4c518
-
SHA1
e0146150acaf2bd63e9aab2617749473d60817f5
-
SHA256
7ba54a05a984fee14ebb6858dedf7bd78bb4a01791b71257697b387590a26ecd
-
SHA512
df5303bad0f8f940b8e26b6c8eac391eb40f9b1a65f514e495027ec5ab6cdd8a25765d9d83f663bd0eb9846ee638a90aa78620b5aa3fdacd6fc14206e3179bdb
-
SSDEEP
6144:HCuvSVL/t4EOL2KAR48Do2Do2Do2Do2Do2Do2Do2Do2Do2Do2Do2Do2Do2Do2Do3:HCOSVxELDAR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_450f776d1da2bc4ed3f7638282f4c518
Files
-
JaffaCakes118_450f776d1da2bc4ed3f7638282f4c518.exe windows:5 windows x86 arch:x86
3ecbda6de31890eaa5cd272ab1b192ac
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetComputerNameA
FillConsoleOutputCharacterA
CreateMutexW
HeapCompact
lstrlenA
BuildCommDCBAndTimeoutsA
CallNamedPipeA
LocalCompact
SetUnhandledExceptionFilter
SetDefaultCommConfigW
SetEnvironmentVariableW
CreateJobObjectW
GetModuleHandleW
WriteFile
SetCommState
TlsSetValue
ActivateActCtx
GlobalAlloc
_hread
GetPrivateProfileStructW
GetVersionExW
SetConsoleMode
lstrcatA
GetBinaryTypeW
FindNextVolumeMountPointW
GetNamedPipeHandleStateW
GetConsoleOutputCP
GetLastError
GetCurrentDirectoryW
GetProcAddress
VirtualAlloc
CopyFileA
SetStdHandle
EnterCriticalSection
LoadLibraryA
SetConsoleDisplayMode
BeginUpdateResourceA
SetCommMask
GetOEMCP
EnumDateFormatsA
LoadLibraryExA
DebugBreakProcess
RequestWakeupLatency
LocalSize
DeleteFileW
AddConsoleAliasA
CommConfigDialogW
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
Sleep
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
MoveFileA
HeapFree
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
HeapReAlloc
HeapAlloc
GetStartupInfoW
GetCPInfo
RtlUnwind
RaiseException
LCMapStringW
LCMapStringA
GetStringTypeW
ExitProcess
GetStdHandle
GetModuleFileNameA
GetFileType
GetConsoleCP
GetConsoleMode
HeapCreate
VirtualFree
TlsGetValue
TlsAlloc
TlsFree
SetLastError
GetCurrentThreadId
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
HeapSize
GetACP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
WriteConsoleA
WriteConsoleW
SetFilePointer
GetLocaleInfoW
CreateFileA
CloseHandle
user32
GetAncestor
Sections
.text Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10.4MB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ