Q:\Work\Canadaman\Projects\BakaSoft\morph\Krypton_Super7_0-37\Bin\StubNew.pdb
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_30524e1ace761f2a5666e7165f664f21.exe
Resource
win7-20241023-en
General
-
Target
JaffaCakes118_30524e1ace761f2a5666e7165f664f21
-
Size
44KB
-
MD5
30524e1ace761f2a5666e7165f664f21
-
SHA1
20f9021c1e7dc473c4e57c420578efc313a474f4
-
SHA256
a4e446c61b053c273254defe7101056a8627422dd62b123c464424599bb91dd8
-
SHA512
013f19dc6d8ab8f1f200e8db1b0c556a97e16a024306fa7b213d5b0518084991859853c4bb445074dcafd83ee284cf426867683761f8f5c47576dbccac71293f
-
SSDEEP
768:mYgPPd1WarignZzCcncubMDLMfuCb4X/e3heDPdJcEJUkzhGly0BTeWuVJVLwA2x:yHd1/ndjnEDLMmCb4m3herEOUkzh8eZK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_30524e1ace761f2a5666e7165f664f21
Files
-
JaffaCakes118_30524e1ace761f2a5666e7165f664f21.exe windows:5 windows x86 arch:x86
6cf6bac04e6b41ae9e67e29c862ea0fa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
ExitProcess
OutputDebugStringW
GlobalAlloc
GetModuleFileNameW
GetProcAddress
GetModuleHandleA
OutputDebugStringA
RtlZeroMemory
GetStartupInfoW
GetModuleHandleW
user32
EndPaint
TranslateAcceleratorW
GetMessageW
PostQuitMessage
LoadCursorW
BeginPaint
TranslateMessage
LoadAcceleratorsW
RegisterClassExW
LoadStringW
CreateWindowExW
DefWindowProcW
DispatchMessageW
DestroyWindow
msvcrt
memset
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
memcpy
_initterm
__wgetmainargs
vsprintf
_exit
_XcptFilter
exit
_wcmdln
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ