spupdsvc.pdb
Static task
static1
General
-
Target
JaffaCakes118_9a9bf0771df39862888e839145396b40
-
Size
201KB
-
MD5
9a9bf0771df39862888e839145396b40
-
SHA1
92c563c6fd2c14a0d8c0592f4a98e16a46c55b7b
-
SHA256
6382fbb3dd94c759a78b99c341aee6f95149e2f3cc1235b48c201f0e4caaccb8
-
SHA512
ab7619d5697c51601aef953d9cd6102ea587c23c1b65f86109bafab4b01484f66a8aa0b5b07002ed7860d9c044226e1fb992f28ea8b76ecfb1e83edab43ee52e
-
SSDEEP
3072:tWeUxgOV/Pgpvc+T7ci4nKSCi18jT8Cy/:geygUXguvnKg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_9a9bf0771df39862888e839145396b40
Files
-
JaffaCakes118_9a9bf0771df39862888e839145396b40.exe windows:5 windows x86 arch:x86
3f0ef3fe3b76ab445f71c28a328c9140
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
advapi32
CloseServiceHandle
ChangeServiceConfig2W
CreateServiceW
OpenSCManagerW
DeleteService
OpenServiceW
SetServiceStatus
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
ntdll
RtlUnwind
_wcsicmp
_snwprintf
wcsncpy
wcschr
wcscpy
wcsrchr
sprintf
_vsnprintf
NtQueryVirtualMemory
setupapi
SetupCloseInfFile
SetupGetLineTextW
SetupFindFirstLineW
SetupOpenInfFileW
SetupFindNextLine
msvcrt
__setusermatherr
_initterm
__wgetmainargs
exit
_cexit
_exit
_c_exit
free
malloc
wprintf
printf
_controlfp
__set_app_type
__p__fmode
__p__commode
_XcptFilter
_adjust_fdiv
__winitenv
kernel32
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
DeleteFileW
GetVersionExW
GetCurrentDirectoryW
SetCurrentDirectoryW
CreateProcessW
WaitForSingleObject
GetExitCodeProcess
CloseHandle
GetFileAttributesW
GetModuleFileNameW
FlushFileBuffers
GetWindowsDirectoryA
SetFileAttributesA
DeleteFileA
CreateFileA
SetFilePointer
GetLocalTime
GetLastError
GetTickCount
WriteFile
SetLastError
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.cdata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE