__EnumPropsW@12
Static task
static1
Behavioral task
behavioral1
Sample
Autocad.Mechanical.2010.key.code.generator.by.ViKiNG.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
Autocad.Mechanical.2010.key.code.generator.by.ViKiNG.exe
Resource
win10v2004-20240412-en
General
-
Target
f2031ef7b620517bcdba4e55387aa25e_JaffaCakes118
-
Size
136KB
-
MD5
f2031ef7b620517bcdba4e55387aa25e
-
SHA1
400ee7fbf843b1d876aba5556891efa90353f200
-
SHA256
20b205ea6539397dd4a0a892bc99d5938bcf5dc246848b4b54de76b321d97955
-
SHA512
97edcf860e6bd9d0598349ece08bcc74605713861da7e5128bd49b1979880af09efe7c8dc932da08a4a997fd76d3f89ec904af18ff0e1fc5d0b04284b0f691ed
-
SSDEEP
3072:13iky2nlhO+gyjHzaJJu7U90/GWWuPWMv8IbDoPh1hJrwzP6QiafWQOb:1yk//mB90XWuPWfoDoP/hWD6Qte/b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Autocad.Mechanical.2010.key.code.generator.by.ViKiNG.exe
Files
-
f2031ef7b620517bcdba4e55387aa25e_JaffaCakes118.zip
-
Autocad.Mechanical.2010.key.code.generator.by.ViKiNG.exe.exe windows:5 windows x86 arch:x86
eccaaf5f8e66db9770a995a74f4f2c63
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrIsIntlEqualW
StrCatBuffW
PathUndecorateA
StrFormatKBSizeW
PathCombineW
shell32
ord716
kernel32
GetVersionExW
SetMessageWaitingIndicator
GetStartupInfoW
GetCommMask
UnlockFile
CloseHandle
TlsFree
DeleteTimerQueueEx
FileTimeToDosDateTime
BackupRead
LoadLibraryExW
CreateFiber
GetFullPathNameW
SetNamedPipeHandleState
CreateSemaphoreW
lstrcpynW
GetLogicalDriveStringsW
CreateMutexW
WriteProfileStringA
user32
WaitForInputIdle
TranslateAcceleratorW
EnumThreadWindows
CheckMenuItem
ChangeDisplaySettingsA
ScrollWindowEx
ReleaseCapture
WindowFromDC
LoadBitmapW
IsCharLowerW
CheckDlgButton
EndDialog
GetWindowPlacement
GetDC
CreateIconIndirect
GetMenuCheckMarkDimensions
DrawTextExW
IsWindowEnabled
GetClipCursor
SetMenuItemBitmaps
DlgDirListComboBoxW
wsprintfA
GetTabbedTextExtentW
SendMessageA
SetSysColors
DrawStateA
IntersectRect
LoadMenuW
PeekMessageW
GetRawInputDeviceInfoA
RedrawWindow
SetMenuContextHelpId
ClipCursor
DispatchMessageA
HiliteMenuItem
SetCaretPos
GetPropW
GetMessagePos
ToUnicodeEx
GetLastActivePopup
GetWindowTextLengthA
gdi32
GetPixel
SetPixelV
GetCurrentPositionEx
CreateBrushIndirect
CloseFigure
AddFontResourceExA
GetCharWidthFloatA
GetTextExtentPoint32A
BitBlt
GetEnhMetaFileW
RemoveFontResourceW
PolyTextOutW
SetBitmapDimensionEx
SetTextAlign
advapi32
FindFirstFreeAce
AreAnyAccessesGranted
AddAccessAllowedAce
CloseEventLog
Exports
Exports
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.exdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 388B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dat_0 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bmem Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedat Size: 1024B - Virtual size: 612B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 938B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
FILE_ID.DIZ
-
ViKiNG.nfo