e:\projects\windows\IEPasswordDecryptor\release\IEPasswordDecryptor.pdb
Static task
static1
Behavioral task
behavioral1
Sample
155绿色软件站.url
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
155绿色软件站.url
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
IEPasswordDecryptor.exe
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
IEPasswordDecryptor.exe
Resource
win10v2004-20240704-en
General
-
Target
30980ba2efbe3f82861a5c29677ea897_JaffaCakes118
-
Size
599KB
-
MD5
30980ba2efbe3f82861a5c29677ea897
-
SHA1
c92a5947caba82ecf7e3100f3a1892e9a2f38c0d
-
SHA256
8517534f08a5f46008ed1f6e3da634593cef0638c86e4fc80441bb10fd71651b
-
SHA512
1d486a16e6a71dd2274fbeaf28813f394f2885beb3b8a5b85b1a968912eb069368f30e326c361e9778ec6a774b8f4bee2ed1079022d88d697fc2b45a0f209549
-
SSDEEP
12288:/ylQgzjT7VhhBjeUwERYw2gTzT3oOuDfV+5LVUXtb:qnXJjBvw/vgnTjuDfVypUdb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/IEPasswordDecryptor.exe
Files
-
30980ba2efbe3f82861a5c29677ea897_JaffaCakes118.rar
-
155绿色软件站.url.url
-
IEPasswordDecryptor.exe.exe windows:5 windows x86 arch:x86
54d71833a0c320efa174e72729b8add8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
LCMapStringW
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStdHandle
GetFileType
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
LCMapStringA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
SizeofResource
LockResource
TerminateProcess
HeapSize
LoadResource
FindResourceA
GetCurrentProcess
GetFileAttributesA
CreateProcessA
GetLastError
GetModuleHandleA
CloseHandle
FreeLibrary
SetLastError
GetProcAddress
LoadLibraryA
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
Sleep
GetTempPathA
lstrlenA
lstrcmpA
lstrcpynA
LocalFree
GetSystemWindowsDirectoryA
CreateFileA
WriteFile
FreeResource
GlobalFree
GlobalUnlock
GlobalLock
MulDiv
MultiByteToWideChar
FormatMessageA
GlobalAlloc
GetModuleFileNameA
GetCurrentProcessId
GetVersionExA
lstrcmpW
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
ExitProcess
CreateThread
ExitThread
HeapReAlloc
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
RaiseException
RtlUnwind
HeapAlloc
GetStartupInfoA
GetCommandLineA
HeapFree
GetFileTime
GetFileSizeEx
FileTimeToLocalFileTime
GetTickCount
SetErrorMode
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
GetOEMCP
GetCPInfo
GetThreadLocale
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GetModuleHandleW
GlobalFlags
WritePrivateProfileStringA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
CreateEventA
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
InterlockedDecrement
GetModuleFileNameW
GetCurrentThreadId
WideCharToMultiByte
user32
CharUpperA
MessageBeep
InvalidateRgn
SetRect
IsRectEmpty
CopyAcceleratorTableA
CharNextA
UnregisterClassA
GetSysColorBrush
DestroyMenu
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
GetMessageA
TranslateMessage
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
WinHelpA
IsChild
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
GetForegroundWindow
DispatchMessageA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
SetMenu
SetForegroundWindow
UpdateWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
CopyRect
DefWindowProcA
CallWindowProcA
GetMenu
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowThreadProcessId
GetLastActivePopup
MessageBoxA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ScreenToClient
GrayStringA
DrawTextExA
DrawTextA
GetClientRect
EnableWindow
GetSysColor
LoadImageA
TabbedTextOutA
GetFocus
SetWindowPos
ShowWindow
MoveWindow
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindowTextLengthA
PostThreadMessageA
GetWindowTextA
RegisterClipboardFormatA
IsWindowVisible
SendMessageA
LoadIconA
GetSystemMenu
AppendMenuA
IsIconic
GetSystemMetrics
DrawIcon
LoadCursorA
ReleaseCapture
RedrawWindow
InvalidateRect
SetWindowLongA
PtInRect
GetParent
SetCapture
SetCursor
OffsetRect
GetWindowRect
DestroyIcon
PostMessageA
GetCursorPos
GetWindowLongA
DrawStateA
InflateRect
GetCapture
GetIconInfo
SetRectEmpty
DrawEdge
WindowFromPoint
GetNextDlgGroupItem
ClientToScreen
EndDialog
GetNextDlgTabItem
IsWindowEnabled
GetDlgItem
IsWindow
DestroyWindow
CreateDialogIndirectParamA
SetActiveWindow
GetWindow
SetFocus
GetDesktopWindow
GetActiveWindow
RemovePropA
gdi32
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreateBitmap
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
GetClipBox
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
SetDIBitsToDevice
SelectObject
SetStretchBltMode
CreateFontIndirectA
GetObjectA
CreateFontA
DeleteObject
GetStockObject
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
GetUserNameA
RegEnumValueA
RegCloseKey
CryptGetHashParam
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
CredFree
CredEnumerateA
OpenProcessToken
CryptHashData
AdjustTokenPrivileges
CryptDestroyHash
CryptCreateHash
CryptAcquireContextA
LookupPrivilegeValueA
CryptReleaseContext
RegQueryValueExA
RegOpenKeyExA
shell32
ShellExecuteA
comctl32
_TrackMouseEvent
InitCommonControlsEx
shlwapi
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathRemoveFileSpecW
PathIsUNCA
oledlg
ord8
ole32
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromProgID
CoInitializeEx
CoTaskMemAlloc
StgCreateDocfileOnILockBytes
CoTaskMemFree
CoUninitialize
CoCreateInstance
CLSIDFromString
CoInitialize
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
oleaut32
SysFreeString
SysAllocStringByteLen
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocString
GetErrorInfo
SysStringLen
winhttp
WinHttpSendRequest
WinHttpReadData
WinHttpOpenRequest
WinHttpOpen
WinHttpQueryDataAvailable
WinHttpCloseHandle
WinHttpConnect
WinHttpReceiveResponse
crypt32
CryptUnprotectData
Sections
.text Size: 288KB - Virtual size: 288KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ