e:\sdweeig\target\retail\i386\CalcPlus.pdb
Static task
static1
Behavioral task
behavioral1
Sample
43869d5f4204222c0f27c0ca0caa85ad_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
43869d5f4204222c0f27c0ca0caa85ad_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
43869d5f4204222c0f27c0ca0caa85ad_JaffaCakes118
-
Size
1.0MB
-
MD5
43869d5f4204222c0f27c0ca0caa85ad
-
SHA1
aeebc422eae9f1afe40836d46164d91300ba412a
-
SHA256
1c9e338f570311341833da7ac7375bd98be0815499b9d23792ce3b698706c835
-
SHA512
8f324ff64810ef2deeba507ac8c0d4bfd4eb7680c56651c0788b54dcb5881d0ac848e01eb80d085c1ee196e33453c92ee5697c1d8527d1dfaaf2d7119ed45c72
-
SSDEEP
6144:rYcvJtww8qp1YPGHKhsz6mLwItVmSr4AKvXtVmSr4AKvVBTjhO9HckHVM/j:rYc3uhsz6mLw5ievmievXhmckHVq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43869d5f4204222c0f27c0ca0caa85ad_JaffaCakes118
Files
-
43869d5f4204222c0f27c0ca0caa85ad_JaffaCakes118.exe windows:5 windows x86 arch:x86
67bec2ecf2054134e7a16cccdb03d106
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shell32
ShellExecuteExW
shlwapi
SHDeleteKeyW
SHDeleteValueW
comctl32
_TrackMouseEvent
msimg32
AlphaBlend
msvcrt
_CxxThrowException
_vsnwprintf
wcscmp
iswdigit
wcstoul
toupper
wcschr
memmove
wcslen
_wcsrev
_c_exit
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
??3@YAXPAX@Z
??1type_info@@UAE@XZ
_controlfp
_except_handler3
__CxxFrameHandler
?terminate@@YAXXZ
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
GlobalAlloc
GlobalFree
GlobalCompact
GetStartupInfoA
MulDiv
OutputDebugStringW
GlobalLock
GlobalSize
GlobalUnlock
lstrcpynW
ResetEvent
CreateEventW
GetCommandLineW
LocalAlloc
lstrcmpW
GetProfileStringW
SetLastError
LocalFree
LocalReAlloc
GetVersionExW
lstrlenW
GetStringTypeExW
GetUserDefaultLCID
GetDateFormatW
FileTimeToSystemTime
GetCurrentDirectoryW
SystemTimeToFileTime
GetLocalTime
CreateThread
CloseHandle
GetExitCodeThread
WaitForSingleObject
SetEvent
GetCurrentThreadId
GlobalReAlloc
gdi32
SetBkColor
GetDeviceCaps
SelectObject
SetStretchBltMode
CreateFontIndirectW
GetDIBits
SetDIBits
IntersectClipRect
SelectClipRgn
ExcludeClipRect
CreateSolidBrush
GetTextExtentPoint32W
BitBlt
SetTextColor
SetBkMode
DeleteDC
CreateCompatibleDC
GetStockObject
CreateRoundRectRgn
DeleteObject
StretchBlt
CreateDIBSection
user32
RedrawWindow
SetDlgItemInt
CheckDlgButton
PostQuitMessage
DefWindowProcW
IsClipboardFormatAvailable
CallNextHookEx
GetClassNameW
PtInRect
EndMenu
InflateRect
HideCaret
GetWindowDC
FillRect
TrackPopupMenuEx
OpenClipboard
GetClipboardData
CharNextA
CloseClipboard
GetDesktopWindow
GetSysColor
SetWindowsHookExW
UnhookWindowsHookEx
MessageBeep
GetMenu
GetSubMenu
CharNextW
RegisterClassExW
GetSysColorBrush
LoadCursorW
LoadIconW
MoveWindow
MapWindowPoints
GetWindowRect
GetWindowLongW
SetWindowRgn
EnumChildWindows
SetWindowPos
GetSystemMetrics
GetClientRect
InvalidateRect
UpdateWindow
SendMessageW
SetDlgItemTextW
EnableMenuItem
CheckMenuItem
CheckMenuRadioItem
OffsetRect
EnableWindow
LoadMenuW
CreateDialogParamW
GetDlgItem
SetWindowLongW
DestroyMenu
DestroyWindow
SetMenu
ShowWindow
SystemParametersInfoW
RegisterClassW
GetClassInfoW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
IsChild
IsDialogMessageW
GetFocus
GetMessageW
LoadAcceleratorsW
CreateWindowExW
MessageBoxW
LoadStringW
SetProcessDefaultLayout
GetProcessDefaultLayout
CallWindowProcW
PostMessageW
EndPaint
DrawIconEx
BeginPaint
SetWindowTextW
EndDialog
GetCursorPos
DestroyIcon
LoadImageW
DrawTextW
GetWindowTextW
ReleaseDC
GetDC
SetLayeredWindowAttributes
SetFocus
GetWindowTextLengthW
GetDlgCtrlID
DialogBoxParamW
SetCursor
CheckRadioButton
ole32
CoCreateInstance
CoUninitialize
CoInitializeEx
oleaut32
SysAllocString
SysStringLen
VariantClear
Sections
.text Size: 123KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 923KB - Virtual size: 922KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ