D:\onidev\hsp3\win32gui\hsprt\hsp3.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fe8bc0f945d2a40d3aab8475fe0ef22f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fe8bc0f945d2a40d3aab8475fe0ef22f_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fe8bc0f945d2a40d3aab8475fe0ef22f_JaffaCakes118
-
Size
425KB
-
MD5
fe8bc0f945d2a40d3aab8475fe0ef22f
-
SHA1
1f60322f06f98280d0bcd2d5f49018142879de85
-
SHA256
67bb9bf3c48812f92136acdda7c22e0064d3462be579c4a665fe4f3fcb86999e
-
SHA512
637e93b939f5cabb70b0baf66abd49a4ec41dd82e5bde10354005a9f1f92b9624e203345fb7a45c86fdf928a7e9a3b91a0ff9e253d0a3e410eed197acc4d2ae5
-
SSDEEP
6144:+lIcgK+rIy4Z1A6VMylqXomzlWs394mzh2yXoGhAO2jBk/HQ:+lIcZUQZ26KMqXoEYstBl5hWW/HQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe8bc0f945d2a40d3aab8475fe0ef22f_JaffaCakes118
Files
-
fe8bc0f945d2a40d3aab8475fe0ef22f_JaffaCakes118.exe windows:5 windows x86 arch:x86
1a6592cf51638319742cd4e2afcc1809
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
_TrackMouseEvent
ord17
kernel32
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExA
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CreateDirectoryW
HeapReAlloc
DecodePointer
GetStringTypeW
GetModuleFileNameA
GetConsoleCP
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetFileType
HeapFree
GetACP
WriteFile
GetStdHandle
GetModuleHandleExW
ExitProcess
GetCurrentDirectoryW
GetCurrentDirectoryA
SetCurrentDirectoryA
SetEnvironmentVariableA
GetFullPathNameA
GetDriveTypeW
ReadFile
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
SetStdHandle
FlushFileBuffers
CreateFileW
WriteConsoleW
HeapSize
FindNextFileA
FindFirstFileA
DeleteFileA
GetLocalTime
FindClose
GetLastError
GetShortPathNameA
MulDiv
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetCommandLineA
GetComputerNameA
GetWindowsDirectoryA
GetSystemDirectoryA
GetSystemInfo
WinExec
GlobalMemoryStatus
GetVersion
WideCharToMultiByte
LoadLibraryA
MultiByteToWideChar
GetProcAddress
FreeLibrary
GetTickCount
HeapAlloc
Sleep
TlsAlloc
EncodePointer
SetLastError
SetEndOfFile
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle
user32
SetWindowTextA
GetSystemMetrics
GetDC
ReleaseDC
SendMessageA
CreateWindowExA
DestroyWindow
ShowWindow
SetWindowPos
GetAsyncKeyState
SetActiveWindow
GetWindowRect
MessageBoxA
ShowCursor
SetCursorPos
LoadIconA
LoadCursorA
FillRect
GetSysColor
AdjustWindowRectEx
InvalidateRect
EndPaint
BeginPaint
GetCursorPos
GetActiveWindow
MoveWindow
UnregisterClassA
RegisterClassA
PostQuitMessage
DefWindowProcA
SetClassLongA
GetClassLongA
SetWindowLongA
GetWindowLongA
InflateRect
DrawFocusRect
GetClientRect
TabbedTextOutA
DrawTextA
IsWindowEnabled
EnableWindow
GetFocus
SetFocus
GetDlgCtrlID
IsDlgButtonChecked
GetDlgItemTextA
CallWindowProcA
PostMessageA
FindWindowA
MsgWaitForMultipleObjects
MapVirtualKeyA
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
EnumDisplaySettingsA
ChangeDisplaySettingsA
gdi32
MoveToEx
SetDIBColorTable
CreateDIBSection
GetTextMetricsA
SetStretchBltMode
StretchBlt
SetPixel
SetBkColor
SelectPalette
RealizePalette
Rectangle
LineTo
GetTextExtentPoint32A
GetPixel
Ellipse
DeleteDC
CreatePen
CreatePalette
CreateCompatibleDC
SetTextColor
SetBkMode
SelectObject
GetStockObject
DeleteObject
CreateSolidBrush
CreateFontIndirectA
BitBlt
GetDeviceCaps
comdlg32
GetSaveFileNameA
GetOpenFileNameA
ChooseColorA
advapi32
GetUserNameA
shell32
ShellExecuteA
ShellExecuteExA
SHGetSpecialFolderPathA
ole32
CLSIDFromProgID
CoInitializeEx
OleInitialize
OleUninitialize
CreateStreamOnHGlobal
CoCreateInstance
IIDFromString
CoUninitialize
oleaut32
SafeArrayUnaccessData
OleLoadPicture
SafeArrayCopy
VariantInit
VariantClear
SysAllocString
SysFreeString
SafeArrayCreate
SafeArrayGetDim
SafeArrayPutElement
SafeArrayGetElement
VariantChangeType
VariantCopyInd
VariantCopy
SafeArrayGetVartype
SafeArrayGetLBound
SafeArrayGetUBound
SysAllocStringByteLen
SafeArrayAccessData
msimg32
GradientFill
winmm
timeBeginPeriod
timeEndPeriod
sndPlaySoundA
timeGetTime
mciSendStringA
timeGetDevCaps
Sections
.text Size: 269KB - Virtual size: 269KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ