c:\users\dodo\downloads\systraydemosrc\systraydemo\release\SysTrayDemo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0a150bb4818830015d3d5119fde65c48_JaffaCakes118.exe
Resource
win7-20240419-en
General
-
Target
0a150bb4818830015d3d5119fde65c48_JaffaCakes118
-
Size
216KB
-
MD5
0a150bb4818830015d3d5119fde65c48
-
SHA1
3714c53e0a8aa937ffa4aacb90afea41bce75ed8
-
SHA256
186da342c1f435d7d864bfd00025cfc69add8d490d2abb7b9b3b3b0f44b3e156
-
SHA512
1ec229ae4c7c83eff543e4b7fe5ed57c86372b8f2016921fd7979f0fce0a6d76abba748b8a6dad708c4d36d4d899150c08696c373bb85b6e23646d1df4495309
-
SSDEEP
3072:t0bbG3u+UULgpJrHp+tZrzxs51z63f0U9ZKQXU0c:6bcuOsrkrzxsW9ZKQhc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 0a150bb4818830015d3d5119fde65c48_JaffaCakes118
Files
-
0a150bb4818830015d3d5119fde65c48_JaffaCakes118.exe windows:4 windows x86 arch:x86
ecb007a39df5f7abf47d3e2318edc909
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetProcAddress
LoadLibraryW
VirtualAlloc
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
ReadFile
CloseHandle
SetFilePointer
FlushFileBuffers
GetConsoleMode
GetConsoleCP
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
WideCharToMultiByte
HeapAlloc
HeapFree
GetVersionExA
GetProcessHeap
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
RaiseException
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
HeapReAlloc
HeapDestroy
HeapCreate
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapSize
InitializeCriticalSection
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
GetLocaleInfoA
GetLocaleInfoW
CreateFileA
user32
EndDialog
PostQuitMessage
DefWindowProcW
DestroyWindow
MessageBoxW
DialogBoxParamW
TrackPopupMenu
SetForegroundWindow
InsertMenuW
CreatePopupMenu
CreateWindowExW
RegisterClassExW
LoadCursorW
LoadIconW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
MessageBoxA
GetMessageW
LoadAcceleratorsW
LoadStringW
GetCursorPos
shell32
Shell_NotifyIconW
Exports
Exports
lhxXfY9mIrDZ
Sections
.text Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ