f:\HaoZip-publish\HaoZip1.8\trunk\bin\Win32\release\pdb\HaoZip7zSetup.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3c447c3419f6bcbe015d15cef531098b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3c447c3419f6bcbe015d15cef531098b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3c447c3419f6bcbe015d15cef531098b_JaffaCakes118
-
Size
3.9MB
-
MD5
3c447c3419f6bcbe015d15cef531098b
-
SHA1
97f023ed8e28d5b689e59266d12a9785b4b10593
-
SHA256
435f4c5a219db39da5b3b91d70dc0b97080236f01efe2f775dc846bd47d128fd
-
SHA512
ff22c32bbadede84d3fe10d061dcfb7863516ab65bd6d7a752f66154440b2e646c944dc237745d3d29e8d412ad27966c6feeb6810c86c46e3dbb7bd7dbeea553
-
SSDEEP
98304:pBdI6GPgTUf+4j8o62pbmxN65JGg5yRAHcSkFDV1I/ppa2T/QsE1m:pBdI6GPgTKE2gXW5yOHc5Fh1Gp0IJl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c447c3419f6bcbe015d15cef531098b_JaffaCakes118
Files
-
3c447c3419f6bcbe015d15cef531098b_JaffaCakes118.exe windows:4 windows x86 arch:x86
79d8c1aa0ed4b94b00bcd22ef061d76a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
InitCommonControlsEx
shell32
SHGetSpecialFolderLocation
CommandLineToArgvW
ShellExecuteW
SHGetFileInfoW
SHGetPathFromIDListW
SHBrowseForFolderW
SHChangeNotify
SHGetMalloc
ShellExecuteExW
kernel32
SetCurrentDirectoryW
WaitForSingleObject
SetFileApisToOEM
GetEnvironmentVariableW
GetShortPathNameW
GetCurrentProcess
GetCurrentThread
SetThreadPriority
GetLastError
GetCurrentDirectoryW
SetPriorityClass
GetModuleFileNameW
LocalFree
GetCommandLineW
DeleteFileW
RemoveDirectoryW
GetFileAttributesW
CreateDirectoryW
FormatMessageW
GetModuleHandleW
FindResourceW
InterlockedIncrement
InterlockedDecrement
FindClose
FindFirstFileW
FindNextFileW
FileTimeToSystemTime
GetProcAddress
FreeLibrary
CloseHandle
ResumeThread
Sleep
GetCurrentThreadId
GetFullPathNameW
SetFileTime
GetLongPathNameW
GetTempFileNameW
MoveFileW
CreateFileW
lstrlenW
GetTempPathW
SetFileAttributesW
ReadFile
SetFilePointer
GetFileSize
WriteFile
SetEndOfFile
CreateProcessW
GetVolumeInformationW
GetDiskFreeSpaceW
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSection
LoadLibraryA
HeapReAlloc
VirtualAlloc
GetConsoleMode
GetConsoleCP
LeaveCriticalSection
EnterCriticalSection
LCMapStringW
WideCharToMultiByte
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetDiskFreeSpaceExW
WaitForMultipleObjects
CreateEventW
SetEvent
ResetEvent
ExpandEnvironmentStringsW
DeleteCriticalSection
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
MultiByteToWideChar
FreeEnvironmentStringsA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetSystemTimeAsFileTime
ExitThread
CreateThread
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
GetStdHandle
GetModuleFileNameA
user32
LoadStringW
GetDesktopWindow
ScreenToClient
EnableWindow
DispatchMessageW
GetMessageW
LoadIconW
PostQuitMessage
KillTimer
SetTimer
TranslateMessage
ShowWindow
DestroyIcon
IsWindow
SendMessageW
MessageBoxW
GetWindowRect
GetSystemMetrics
PostMessageW
DialogBoxParamW
SetWindowPos
GetWindowTextW
SetWindowTextW
GetDlgItem
EndDialog
CreateDialogParamW
IsWindowVisible
IsDialogMessageW
gdi32
CreateSolidBrush
DeleteObject
advapi32
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
ole32
CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance
CoInitializeEx
Sections
.text Size: 273KB - Virtual size: 273KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 266KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ