MOVIEMK.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0453c80eedd06cba6497d72978370ee1_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
0453c80eedd06cba6497d72978370ee1_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
0453c80eedd06cba6497d72978370ee1_JaffaCakes118
-
Size
3.4MB
-
MD5
0453c80eedd06cba6497d72978370ee1
-
SHA1
88637326a50120993578c76309e212cef5637147
-
SHA256
2c4dd62f296976ac25d11eb434c832d28954736678542abe7c9a22bd977f1a7f
-
SHA512
4d2d15204a8d9f02a87423716469cbcdd78e143dd2d51c2789ddbc7dafeea373ee4072c400834e7b9594825cdcea2f68a3835e88694cd036d737121e1ca22288
-
SSDEEP
49152:ea1ISQus8/2Ge/5mMk1HvWpcnVcVyCDxl4KZKWCbquSVex1yrZO:Z1ISQusLGKmMaHgcnbgxPKWCbMs1G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0453c80eedd06cba6497d72978370ee1_JaffaCakes118
Files
-
0453c80eedd06cba6497d72978370ee1_JaffaCakes118.exe windows:5 windows x86 arch:x86
09b86f55bfca6b8f68c5bb0dd5f6fe53
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
??3@YAXPAX@Z
??2@YAPAXI@Z
_ftol
realloc
malloc
free
wcscmp
_purecall
memmove
wcsstr
_wcsicmp
_snwprintf
wcsrchr
_wfullpath
iswspace
_wtoi
ceil
wcscat
wcsncpy
_wfopen
fclose
fgetc
fread
ftell
fseek
isprint
strncpy
tolower
_vsnwprintf
iswctype
_wtol
isdigit
wcsncmp
_strnicmp
vswprintf
iswdigit
wcsncat
_wcsnicmp
swprintf
wcscpy
wcslen
_endthreadex
calloc
_beginthreadex
srand
time
qsort
wcschr
_wcsrev
sprintf
wcspbrk
rand
_stricmp
ctime
swscanf
_c_exit
_exit
__CxxFrameHandler
_XcptFilter
_cexit
exit
_controlfp
_onexit
__dllonexit
?terminate@@YAXXZ
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
advapi32
RegEnumValueW
RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyExW
RegEnumKeyW
RegCloseKey
kernel32
FindClose
GetFileAttributesW
SetErrorMode
GlobalUnlock
GlobalLock
GlobalAlloc
FindFirstFileW
DeleteFileW
CopyFileW
lstrcpynA
lstrcpynW
GetLastError
GetFullPathNameW
GetDiskFreeSpaceExW
GetLocaleInfoW
GetNumberFormatW
CompareStringW
lstrcmpiW
FreeResource
GlobalFree
GlobalHandle
InitializeCriticalSection
DeleteCriticalSection
MultiByteToWideChar
lstrcatW
GetModuleFileNameW
SetThreadPriority
FindNextFileW
GetProfileIntW
GetTempPathW
CloseHandle
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
WaitForSingleObject
GetLongPathNameW
lstrlenA
EnumResourceLanguagesW
GetTickCount
Sleep
CreateFileMappingA
CreateEventW
GetUserDefaultUILanguage
SetEvent
CreateDirectoryW
GetShortPathNameW
ReleaseMutex
CreateMutexW
GetCommandLineW
CreateFileW
MoveFileW
GetTempFileNameW
CompareFileTime
SleepEx
GetFileSize
GetDriveTypeW
WideCharToMultiByte
GetACP
SizeofResource
WriteFile
VirtualProtect
VirtualQuery
GetModuleHandleW
EnumUILanguagesW
LoadLibraryExW
ExpandEnvironmentStringsW
SetEnvironmentVariableW
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleA
GetStartupInfoA
GetCurrentProcessId
FindResourceW
LoadResource
LockResource
GetVersionExW
LoadLibraryW
GetProcAddress
FreeLibrary
InterlockedIncrement
lstrcmpW
lstrcpyW
MulDiv
SetLastError
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
FlushInstructionCache
FormatMessageW
LocalFree
InterlockedDecrement
lstrlenW
SetFilePointer
DebugBreak
LocalAlloc
GetVolumeInformationW
MapViewOfFileEx
CreateFileMappingW
GetPrivateProfileIntW
GetPrivateProfileStringW
SetEndOfFile
OutputDebugStringW
GetExitCodeThread
ResetEvent
GetVolumeNameForVolumeMountPointW
DeviceIoControl
WaitForMultipleObjects
PostQueuedCompletionStatus
ReadDirectoryChangesW
GetOverlappedResult
GetQueuedCompletionStatus
CreateIoCompletionPort
GetDiskFreeSpaceW
GetFileSizeEx
SetFilePointerEx
VirtualAlloc
VirtualFree
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
GetVersion
HeapDestroy
IsBadWritePtr
WinExec
GetTimeFormatW
GetDateFormatW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GlobalSize
GetFileAttributesExW
SetFileAttributesW
RemoveDirectoryW
ReadFile
SetThreadExecutionState
GetUserDefaultLCID
IsBadReadPtr
GetThreadLocale
CreateThread
QueryPerformanceCounter
gdi32
ExcludeClipRect
GetDIBits
GetObjectA
TextOutW
Polygon
CombineRgn
SetRectRgn
CreateRectRgnIndirect
GetClipBox
DPtoLP
GetLayout
CreateRectRgn
StretchBlt
SelectClipRgn
ExtTextOutW
Rectangle
SetViewportOrgEx
SetROP2
GetNearestColor
CreatePen
CreateDCW
GetCurrentObject
RestoreDC
LineTo
LPtoDP
SetWindowOrgEx
SetMapMode
SaveDC
MoveToEx
GetTextMetricsW
GetTextExtentPoint32W
CreateSolidBrush
GetStockObject
GetDeviceCaps
CreateDIBSection
CreateCompatibleBitmap
SetBrushOrgEx
CreateFontIndirectW
SetBkMode
CreateCompatibleDC
BitBlt
CreateBitmap
CreatePatternBrush
SelectObject
PatBlt
DeleteDC
DeleteObject
GetObjectW
SetBkColor
SetTextColor
user32
InvalidateRgn
GetDesktopWindow
RedrawWindow
CreateAcceleratorTableW
PostQuitMessage
LoadStringA
GetDlgItemInt
LoadIconW
DrawIcon
SetDlgItemInt
GetCursorPos
GetDlgCtrlID
DrawFocusRect
DispatchMessageW
TranslateMessage
GetMessageW
CreateDialogIndirectParamW
GetMenu
SetMenu
BringWindowToTop
GetWindowPlacement
GetTopWindow
TranslateAcceleratorW
GetMenuStringW
AppendMenuW
FindWindowW
EnableMenuItem
InsertMenuW
DeleteMenu
EndMenu
AdjustWindowRectEx
TrackPopupMenu
SetRect
PostThreadMessageW
IsIconic
SetProcessDefaultLayout
ScrollWindowEx
SetScrollPos
GetScrollInfo
SetScrollInfo
IsRectEmpty
GetAsyncKeyState
GetIconInfo
SetClassLongW
DrawTextExW
UnionRect
IntersectRect
IsDlgButtonChecked
CheckDlgButton
GetProcessDefaultLayout
LoadAcceleratorsW
GetMessageTime
TrackMouseEvent
ClipCursor
UpdateLayeredWindow
DestroyCursor
NotifyWinEvent
DragDetect
GetClassLongW
GetDC
UnregisterClassW
DestroyIcon
DialogBoxParamW
GetWindowTextLengthW
GetWindowTextW
SetForegroundWindow
SetWindowPlacement
ClientToScreen
PeekMessageW
DrawFrameControl
InflateRect
OffsetRect
FrameRect
DrawTextW
GetKeyState
CharNextW
CharLowerW
WindowFromPoint
MessageBeep
GetActiveWindow
GetWindowThreadProcessId
IsMenu
SetWindowsHookExW
UnhookWindowsHookEx
GetClassNameW
CallNextHookEx
GetSubMenu
GetLastActivePopup
MessageBoxW
ModifyMenuW
TrackPopupMenuEx
LoadBitmapW
MoveWindow
CreatePopupMenu
FindWindowExW
LoadMenuW
PostMessageW
DrawEdge
SetCapture
GetCapture
SetCursor
ReleaseDC
GetWindowDC
EndPaint
BeginPaint
GetMessagePos
ScreenToClient
PtInRect
ReleaseCapture
GetAncestor
SetMenuDefaultItem
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoW
SetMenuItemInfoW
GetSystemMetrics
CallWindowProcW
DefWindowProcW
SetActiveWindow
IsWindowVisible
IsChild
GetClassInfoExW
LoadCursorW
wsprintfW
RegisterClassExW
InvalidateRect
RegisterWindowMessageW
CreateDialogParamW
CopyRect
IsWindowEnabled
GetFocus
SetFocus
EnableWindow
GetNextDlgTabItem
KillTimer
SetTimer
UpdateWindow
SetWindowTextW
CreateWindowExW
DestroyMenu
RemoveMenu
SendMessageW
DestroyWindow
EndDialog
LoadImageW
SetWindowLongW
IsWindow
IsDialogMessageW
GetDlgItem
ShowWindow
GetSystemMenu
GetSysColor
GetSysColorBrush
FillRect
LoadStringW
GetWindow
GetWindowRect
SystemParametersInfoW
MapWindowPoints
SetWindowPos
GetParent
SetDlgItemTextW
GetClientRect
GetWindowLongW
GetWindowLongA
GetClassNameA
SendMessageA
IsWindowUnicode
DrawTextA
MapDialogRect
CopyImage
RegisterClipboardFormatW
GetMonitorInfoW
MonitorFromWindow
CharUpperW
CopyIcon
GetForegroundWindow
EqualRect
MsgWaitForMultipleObjects
DestroyAcceleratorTable
SetWindowRgn
CharUpperBuffW
SetRectEmpty
GetDoubleClickTime
comdlg32
GetOpenFileNameW
GetSaveFileNameW
ChooseColorW
shell32
SHParseDisplayName
DragQueryFileW
SHGetFolderPathW
ShellExecuteExW
SHGetMalloc
SHGetPathFromIDListW
SHGetSettings
ShellAboutW
ShellExecuteW
SHGetFileInfoW
SHGetDiskFreeSpaceExW
SHAddToRecentDocs
SHBrowseForFolderW
SHPathPrepareForWriteW
SHGetSpecialFolderPathW
CommandLineToArgvW
SHFileOperationW
SHCreateQueryCancelAutoPlayMoniker
SHGetDesktopFolder
SHGetFolderLocation
ord747
SHGetFolderPathAndSubDirW
ole32
RegisterDragDrop
GetRunningObjectTable
CreateStreamOnHGlobal
OleUninitialize
CoTaskMemFree
StringFromCLSID
CoTaskMemAlloc
OleLockRunning
CLSIDFromProgID
CLSIDFromString
OleGetClipboard
ReleaseStgMedium
OleFlushClipboard
OleIsCurrentClipboard
CoUninitialize
CoInitialize
CoRevokeClassObject
CoRegisterClassObject
CoResumeClassObjects
StringFromGUID2
RevokeDragDrop
StgIsStorageFile
OleSaveToStream
WriteClassStm
OleLoadFromStream
CreateOleAdviseHolder
OleRegGetUserType
OleRegEnumVerbs
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
PropVariantClear
StgCreatePropStg
StgOpenPropStg
FreePropVariantArray
CoCreateGuid
StgOpenStorage
StgCreateDocfile
OleSetClipboard
CoCreateInstance
CoFreeUnusedLibraries
DoDragDrop
OleInitialize
oleaut32
RegisterTypeLi
SysAllocString
SysAllocStringLen
VariantClear
VariantInit
SysAllocStringByteLen
OleCreatePropertyFrame
SafeArrayGetLBound
SafeArrayCopy
SysStringLen
VariantChangeTypeEx
VariantChangeType
SysStringByteLen
SafeArrayCreateVector
SafeArrayGetElement
SafeArrayPutElement
SafeArrayDestroy
VariantCopy
RevokeActiveObject
LoadRegTypeLi
LoadTypeLi
DispCallFunc
SysFreeString
comctl32
ord8
ImageList_Destroy
ImageList_AddMasked
ImageList_Add
ImageList_Create
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_GetImageCount
ImageList_Draw
ImageList_DrawIndirect
DestroyPropertySheetPage
PropertySheetW
CreatePropertySheetPageW
_TrackMouseEvent
ImageList_Remove
ImageList_GetIconSize
InitCommonControlsEx
ImageList_LoadImageW
CreateStatusWindowW
shlwapi
PathIsURLW
PathSkipRootW
PathCanonicalizeW
PathFindNextComponentW
UrlIsW
PathAddBackslashW
UrlGetPartW
SHAutoComplete
PathIsRelativeW
PathRemoveFileSpecW
StrRetToStrW
PathCompactPathExW
StrCmpLogicalW
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
winmm
mixerOpen
mixerClose
mixerGetLineControlsW
mixerSetControlDetails
mixerGetControlDetailsW
mixerGetDevCapsW
timeGetTime
waveOutGetNumDevs
mixerGetNumDevs
mixerGetID
waveOutClose
waveOutOpen
mixerGetLineInfoW
rpcrt4
UuidFromStringW
RpcStringFreeW
UuidToStringW
RpcStringFreeA
UuidCreate
UuidEqual
UuidToStringA
wmvcore
WMCreateProfileManager
WMCreateEditor
WMCreateReader
gdiplus
GdipGetImageGraphicsContext
GdipDrawImagePointRectI
GdipCreatePen1
GdipCreateBitmapFromResource
GdipFree
GdipDrawRectangleI
GdipDrawImageRectRect
GdipSaveImageToStream
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipDeletePen
GdipSetPropertyItem
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromScan0
GdipCreateBitmapFromGdiDib
GdipCreateHBITMAPFromBitmap
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipGraphicsClear
GdipGetImageThumbnail
GdipGetImageHorizontalResolution
GdipGetImageVerticalResolution
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipDrawImageRectRectI
GdipAlloc
GdipCloneImage
GdipGetFontCollectionFamilyCount
GdipNewInstalledFontCollection
GdipDeleteFontFamily
GdipDeleteFont
GdiplusShutdown
GdiplusStartup
GdipDeleteGraphics
GdipDisposeImage
GdipImageGetFrameCount
GdipCreateBitmapFromHBITMAP
GdipCloneFontFamily
GdipGetFontCollectionFamilyList
GdipGetFamilyName
GdipIsStyleAvailable
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipGetFamily
GdipSaveImageToFile
GdipSetSmoothingMode
secur32
GetUserNameExW
msimg32
AlphaBlend
GradientFill
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
uxtheme
GetThemeInt
DrawThemeBackground
OpenThemeData
CloseThemeData
IsAppThemed
avifil32
AVIFileOpenW
crypt32
CryptProtectData
CryptUnprotectData
wininet
FtpSetCurrentDirectoryW
HttpSendRequestW
InternetConnectW
FtpCreateDirectoryW
InternetAutodial
InternetAttemptConnect
InternetGoOnlineW
InternetCheckConnectionW
InternetOpenW
InternetGetLastResponseInfoW
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestExW
HttpEndRequestW
InternetOpenUrlW
InternetReadFile
InternetCloseHandle
InternetGetConnectedState
InternetWriteFile
urlmon
CoGetClassObjectFromURL
CreateFormatEnumerator
CreateAsyncBindCtx
Exports
Exports
??0CtrlContainerFrame@DlgAutoLayout@@QAE@AAVIMsoAutoLayoutDialog@1@PAXPAVCompositeFrame@1@@Z
??0CtrlFrame@DlgAutoLayout@@QAE@AAVIMsoAutoLayoutDialog@1@PAXPAVCompositeFrame@1@@Z
??0FrameEqualizer@DlgAutoLayout@@QAE@AAVIMsoAutoLayoutDialog@1@@Z
??0GroupBoxFrame@DlgAutoLayout@@QAE@AAVIMsoAutoLayoutDialog@1@PAX1PAVCompositeFrame@1@@Z
??0GroupBoxFrame@DlgAutoLayout@@QAE@AAVIMsoAutoLayoutDialog@1@PAXPAVCompositeFrame@1@@Z
??0HorizFrame@DlgAutoLayout@@QAE@AAVIMsoAutoLayoutDialog@1@PAVCompositeFrame@1@@Z
??0IMsoAutoLayoutDialog@DlgAutoLayout@@IAE@XZ
??0ListEditFrame@DlgAutoLayout@@QAE@AAVIMsoAutoLayoutDialog@1@PAX1PAVCompositeFrame@1@@Z
??0MsoWCtrlContainerFrame@@QAE@AAVIMsoWAutoLayoutDialog@@GPAVMsoWCompositeFrame@@@Z
??0MsoWCtrlFrame@@QAE@AAVIMsoWAutoLayoutDialog@@GPAVMsoWCompositeFrame@@@Z
??0MsoWFrameEqualizer@@QAE@AAVIMsoWAutoLayoutDialog@@@Z
??0MsoWGroupBoxFrame@@QAE@AAVIMsoWAutoLayoutDialog@@GGPAVMsoWCompositeFrame@@@Z
??0MsoWGroupBoxFrame@@QAE@AAVIMsoWAutoLayoutDialog@@GPAVMsoWCompositeFrame@@@Z
??0MsoWHorizFrame@@QAE@AAVIMsoWAutoLayoutDialog@@PAVMsoWCompositeFrame@@@Z
??0MsoWListEditFrame@@QAE@AAVIMsoWAutoLayoutDialog@@GGPAVMsoWCompositeFrame@@@Z
??0MsoWNumInputFrame@@QAE@AAVIMsoWAutoLayoutDialog@@GGPAVMsoWCompositeFrame@@@Z
??0MsoWOverlapFrame@@QAE@AAVIMsoWAutoLayoutDialog@@PAVMsoWCompositeFrame@@@Z
??0MsoWTabCtrlFrame@@QAE@AAVIMsoWAutoLayoutDialog@@GPAVMsoWCompositeFrame@@@Z
??0MsoWTableFrame@@QAE@AAVIMsoWAutoLayoutDialog@@HHPAVMsoWCompositeFrame@@@Z
??0MsoWVertFrame@@QAE@AAVIMsoWAutoLayoutDialog@@PAVMsoWCompositeFrame@@@Z
??0NumInputFrame@DlgAutoLayout@@QAE@AAVIMsoAutoLayoutDialog@1@PAX1PAVCompositeFrame@1@@Z
??0NumInputFrame@DlgAutoLayout@@QAE@AAVIMsoAutoLayoutDialog@1@PAXPAVCompositeFrame@1@@Z
??0OverlapFrame@DlgAutoLayout@@QAE@AAVIMsoAutoLayoutDialog@1@PAVCompositeFrame@1@@Z
??0TabCtrlFrame@DlgAutoLayout@@QAE@AAVIMsoAutoLayoutDialog@1@PAX1PAVCompositeFrame@1@@Z
??0TabCtrlFrame@DlgAutoLayout@@QAE@AAVIMsoAutoLayoutDialog@1@PAXPAVCompositeFrame@1@@Z
??0TableFrame@DlgAutoLayout@@QAE@AAVIMsoAutoLayoutDialog@1@HHPAVCompositeFrame@1@@Z
??0VertFrame@DlgAutoLayout@@QAE@AAVIMsoAutoLayoutDialog@1@PAVCompositeFrame@1@@Z
??1IMsoAutoLayoutDialog@DlgAutoLayout@@MAE@XZ
_MsoDALCheckBoxBMHeight@0
_MsoDALCheckBoxBMWidth@0
_MsoDALCheckBoxBMWidthPlusMargin@4
_MsoDALDestructFrames@4
_MsoDALEditStrHeightPix@4
_MsoDALFDlgIsValid@4
_MsoDALGroupBoxNoLabelTopAdjustPix@4
_MsoDALMarkDlgInvalid@4
_MsoDALSuspendFrameDestruction@4
_MsoDUToPix@12
_MsoDestroyIMsoWAutoLayoutDialog@4
_MsoFCreateIMsoWAutoLayoutDialog@12
_MsoPixToDU@12
_MsoWIsAutoLayoutEnabled@8
_MsoWTabCtrlIndexToHwnd@8
Sections
.text Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
MovieMak Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 612KB - Virtual size: 613KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE