Mystify.pdb
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_2abba488f7a377533826cf4455597622.exe
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_2abba488f7a377533826cf4455597622
-
Size
392KB
-
MD5
2abba488f7a377533826cf4455597622
-
SHA1
a23bad391d614a5d8e0d39278afc1b2764d0f285
-
SHA256
18d194c643fd462d8cbdf533020bc7f94a04452fd290c81cf1ae73f9b0177f47
-
SHA512
5b14015bb44999bd4e51503bead7077badeeeec9c9eb7b38b30eee2fc5cfba3d6deecd291b8b4d230b3e9148d0a47aa01465e3338ab526dfefc189cf2d306d5e
-
SSDEEP
12288:XLlB+ihkpHmqBZN0wL3InaHbw3AAwyg8HX7Al:X+ihylDHGvg832
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_2abba488f7a377533826cf4455597622
Files
-
JaffaCakes118_2abba488f7a377533826cf4455597622.exe windows:6 windows x86 arch:x86
51d2d8104faa48aa155c0708c80060f4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegQueryValueExA
RegOpenKeyExA
kernel32
GetTickCount
InterlockedExchange
Sleep
InterlockedCompareExchange
GetStartupInfoA
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetSystemInfo
GetVersionExA
IsProcessorFeaturePresent
GetProcAddress
OutputDebugStringA
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
LockResource
LoadResource
SizeofResource
FindResourceW
GetModuleHandleW
MulDiv
GetCommandLineW
QueryPerformanceFrequency
HeapSetInformation
user32
SetWindowPos
UnionRect
SetCursor
BeginPaint
EndPaint
SetTimer
KillTimer
DefWindowProcW
PostMessageW
GetMessageW
TranslateMessage
DispatchMessageW
PostQuitMessage
FillRect
SystemParametersInfoW
DrawTextW
ScreenToClient
InvalidateRect
UpdateWindow
SetRect
LoadCursorW
LoadStringW
IntersectRect
OffsetRect
PeekMessageW
RegisterClassW
GetSystemMetrics
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
MessageBoxW
AdjustWindowRect
SetRectEmpty
EnumDisplaySettingsW
GetClientRect
CreateWindowExW
LoadIconW
msvcrt
_ftol2
srand
memset
_CIsqrt
_ftol2_sse
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_amsg_exit
__setusermatherr
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
_except_handler4_common
_controlfp
_unlock
__dllonexit
_lock
_CIacos
_CIatan2
_CIsin
_finite
memcpy
??3@YAXPAX@Z
??2@YAPAXI@Z
iswdigit
time
qsort
_vsnwprintf
_wtol
rand
_onexit
comctl32
InitCommonControlsEx
ord344
gdi32
SetBkColor
SetTextColor
SelectObject
DeleteObject
GetStockObject
ExcludeClipRect
CreateFontW
GetDeviceCaps
d3d9
Direct3DCreate9
ole32
CoUninitialize
CoInitializeEx
winmm
timeGetTime
Sections
.text Size: 125KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.vmp0 Size: 176KB - Virtual size: 472KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE