k:\v3_11\V3Setup_Local\trunk\release\V3Setup.pdb
Static task
static1
Behavioral task
behavioral1
Sample
28b426cb5c58eab9a4ebfca0a2753343_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
28b426cb5c58eab9a4ebfca0a2753343_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
28b426cb5c58eab9a4ebfca0a2753343_JaffaCakes118
-
Size
7.8MB
-
MD5
28b426cb5c58eab9a4ebfca0a2753343
-
SHA1
1e4e54007935335305b642e6f1b7da7458e9eb8d
-
SHA256
e3978ef48f1aaa17038a90d1a7c3a377598c97fc1477bf92bc781168d3524ae5
-
SHA512
db027219a7ff7a3799cec1552064c49c0ef0dd3469730f1a39721848343dd117a080163afafb9d98e09e2dcb1038a16ae93dc2704aad330a3d221dd889fdb030
-
SSDEEP
196608:IwWEJ4ACc9A5/WoIfocfbblvpUwlwqF6VhoV:IwWEJ1xkWzlxXebA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28b426cb5c58eab9a4ebfca0a2753343_JaffaCakes118
Files
-
28b426cb5c58eab9a4ebfca0a2753343_JaffaCakes118.exe windows:5 windows x86 arch:x86
4e2c62f4654482b7e33bd805bc1cccf8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
LoadLibraryW
GetProcessHeap
HeapFree
FreeLibrary
WaitForSingleObject
MulDiv
SetFileAttributesW
RemoveDirectoryW
OpenMutexW
FindResourceW
SizeofResource
LoadResource
LockResource
FreeResource
WriteFile
GetTempPathW
GetTempFileNameW
GetFileSize
HeapAlloc
GetPrivateProfileStringW
GetPrivateProfileSectionW
WritePrivateProfileStringW
CreateProcessW
DeviceIoControl
GetLocaleInfoW
lstrcatW
CreateDirectoryW
CopyFileW
CreateToolhelp32Snapshot
Process32FirstW
lstrcmpiW
OpenProcess
TerminateProcess
Process32NextW
OutputDebugStringW
lstrlenW
FlushFileBuffers
ReadFile
WideCharToMultiByte
MultiByteToWideChar
SetFilePointer
SystemTimeToFileTime
SetFileTime
GetFileAttributesW
GetCurrentDirectoryW
LocalFileTimeToFileTime
CreateEventW
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetConsoleMode
GetConsoleCP
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringA
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
lstrcpynW
GetSystemDirectoryW
GetLogicalDriveStringsW
GetDiskFreeSpaceExW
DeleteFileW
GetModuleFileNameW
CreateFileW
GetDriveTypeW
ResumeThread
SuspendThread
SetEvent
CloseHandle
CreateMutexW
GetLastError
GetEnvironmentVariableW
GetModuleFileNameA
GetStdHandle
HeapReAlloc
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
HeapCreate
LCMapStringW
ExitProcess
Sleep
TlsFree
SetLastError
GetUserDefaultLangID
GetVersionExW
lstrcpyW
TlsSetValue
TlsAlloc
TlsGetValue
GetProcAddress
ExitThread
GetCurrentThreadId
CreateThread
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
user32
SystemParametersInfoW
GetWindowRect
MoveWindow
LoadStringW
DialogBoxParamW
wsprintfW
GetParent
InvalidateRect
SetClassLongW
EndDialog
GetSystemMenu
EnableMenuItem
MessageBoxW
LoadIconW
IsDlgButtonChecked
CheckDlgButton
SetDlgItemTextW
ShowWindow
EnableWindow
GetSysColorBrush
SetWindowTextW
LoadCursorW
SetCursor
SetWindowLongW
PostMessageW
SendDlgItemMessageW
ReleaseDC
GetDC
CreateWindowExW
OffsetRect
MapWindowPoints
GetDlgItem
SendMessageW
gdi32
SetTextColor
SetBkMode
CreateFontIndirectW
GetTextMetricsW
GetDeviceCaps
SelectObject
GetObjectW
DeleteObject
advapi32
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
RegCloseKey
RegOpenKeyExW
shell32
SHGetSpecialFolderPathW
SHCreateDirectoryExW
SHGetFolderPathW
SHFileOperationW
ShellExecuteW
ole32
CoCreateInstance
CoUninitialize
CoInitialize
shlwapi
PathRemoveFileSpecW
PathFindFileNameW
PathFileExistsW
comctl32
PropertySheetW
ImageList_LoadImageW
ImageList_Destroy
CreatePropertySheetPageW
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
Sections
.text Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7.7MB - Virtual size: 7.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ