msoxmled.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0a9f123db45f9f9295f091a72684d42d_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
0a9f123db45f9f9295f091a72684d42d_JaffaCakes118
-
Size
125KB
-
MD5
0a9f123db45f9f9295f091a72684d42d
-
SHA1
39f647021e210fcaa3bd59313699c42e1449a01c
-
SHA256
e68bc8f0964acc7e57758105c1f13c199a76470bc528ff2f7fef33c1f82a08a6
-
SHA512
8c1f511cd060a5612618da191537fb3bc2751a7eb565e7f76ac0602a0f3ad13fbf50e3768e04cd31489ef679ed4074aeeb016f0624061b759525768d1142c50e
-
SSDEEP
3072:Rj0TZKchZPBRByJ1IXWYjwBmxDv4Y3MLYHmMu1EJ:aFvgIGPmh4JL3Je
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a9f123db45f9f9295f091a72684d42d_JaffaCakes118
Files
-
0a9f123db45f9f9295f091a72684d42d_JaffaCakes118.exe windows:4 windows x86 arch:x86
54486fcaff88fd1b6df7a964bc043d54
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
GetParent
DdeInitializeW
DdeCreateStringHandleW
DdeClientTransaction
DdeUninitialize
CharLowerW
IsCharAlphaW
DdeConnectList
DdeQueryNextServer
DdeQueryConvInfo
AllowSetForegroundWindow
IsIconic
ShowWindow
SetForegroundWindow
DdeFreeDataHandle
DdeFreeStringHandle
DdeDisconnectList
kernel32
TerminateProcess
GetStartupInfoA
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
VirtualProtect
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
ExitProcess
GlobalFree
GetLastError
GetCurrentProcessId
CreateProcessW
GlobalAlloc
CloseHandle
MultiByteToWideChar
GetACP
ReadFile
CreateFileW
lstrlenW
GetModuleHandleA
GetCommandLineW
GetSystemTimeAsFileTime
advapi32
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
shell32
ShellExecuteW
CommandLineToArgvW
ShellExecuteExW
shlwapi
StrCmpIW
AssocQueryStringByKeyW
PathCreateFromUrlW
UrlIsW
StrCmpNIW
AssocQueryStringW
PathFindFileNameW
StrToIntExW
StrStrW
StrChrW
StrCmpW
PathFindExtensionW
wininet
GetUrlCacheEntryInfoW
CreateUrlCacheEntryW
urlmon
URLDownloadToFileW
msvcrt
__p__commode
__p__fmode
__set_app_type
__dllonexit
_onexit
_controlfp
_c_exit
_exit
_XcptFilter
_ismbblead
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
_except_handler3
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cdata Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE