setup.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3975b66b6cd39354e79497e28ee85233_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3975b66b6cd39354e79497e28ee85233_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3975b66b6cd39354e79497e28ee85233_JaffaCakes118
-
Size
1.0MB
-
MD5
3975b66b6cd39354e79497e28ee85233
-
SHA1
b0a92c74d3f0814f7727e712d8b35e3271b94c1f
-
SHA256
9163c3e0cac8c7280dc3d9a86de4eb00b374e34bfa30ab6c09d6b7ffe8e8c9af
-
SHA512
8da11142e016ef373e5fb7d9d4893d97b876d99bafd0c804c5f61e6816680bb7b5003c59a40cbf0924bf1442faaadad19d98e50ee7df554df2b0b3c2a8f670cd
-
SSDEEP
24576:+o9W0uXKqkmy3THI8qi3SigwZT5CXsycIKl/+:YX6bjqlgOk/+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3975b66b6cd39354e79497e28ee85233_JaffaCakes118
Files
-
3975b66b6cd39354e79497e28ee85233_JaffaCakes118.exe windows:4 windows x86 arch:x86
65563a50476915a5464c522cd0dbbeb7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
CompareStringW
GetCommandLineW
HeapSize
SetFileAttributesW
FindNextFileW
RemoveDirectoryW
DeleteFileW
GetTempFileNameW
GetFileAttributesW
FindResourceExA
LoadResource
SizeofResource
LockResource
GlobalAlloc
LoadLibraryW
CreateDirectoryW
GetUserDefaultUILanguage
GetTempPathW
GetTempPathA
MoveFileExW
CreateFileW
ReadFile
FindFirstFileW
FindClose
GetFileSizeEx
ExpandEnvironmentStringsW
GetFullPathNameW
lstrcmpW
GetSystemTime
SystemTimeToTzSpecificLocalTime
lstrlenW
SetEnvironmentVariableA
GetLastError
FormatMessageW
GlobalFree
LocalFree
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
FatalAppExitA
InterlockedIncrement
InterlockedDecrement
GetProcAddress
GetModuleHandleA
ExitProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
HeapValidate
IsBadReadPtr
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThread
HeapDestroy
HeapCreate
VirtualFree
WriteFile
RaiseException
DebugBreak
IsDebuggerPresent
MultiByteToWideChar
lstrlenA
LoadLibraryA
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
GetModuleFileNameW
GetACP
GetOEMCP
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
InitializeCriticalSection
HeapReAlloc
VirtualAlloc
RtlUnwind
VirtualQuery
SetFilePointer
GetConsoleCP
GetConsoleMode
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetLocaleInfoW
GetTimeFormatA
GetDateFormatA
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
GetTimeZoneInformation
CreateFileA
CloseHandle
FlushFileBuffers
CompareStringA
ole32
StringFromGUID2
user32
LoadStringW
MessageBoxA
MessageBoxExW
MessageBoxW
EnableWindow
GetDlgItem
IsDlgButtonChecked
SetDlgItemTextW
SetWindowTextW
SetDlgItemTextA
EndDialog
DialogBoxParamW
comctl32
ord17
msi
ord169
ord141
ord70
ord88
ord19
ord92
ord190
ord16
ord8
ord20
ord137
shell32
CommandLineToArgvW
SHGetFolderPathW
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExW
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
Sections
.text Size: 316KB - Virtual size: 314KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ