e:\builds\acr_3.7_all\20070130.r.058\camera_raw\target\dng_win_vc\release\Adobe DNG Converter.pdb
Static task
static1
Behavioral task
behavioral1
Sample
40ffe07a37c983e28be14f69fd1bc239_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
40ffe07a37c983e28be14f69fd1bc239_JaffaCakes118
-
Size
6.0MB
-
MD5
40ffe07a37c983e28be14f69fd1bc239
-
SHA1
0e51c0be957ecf9b33bb4e93b0f8ea843fd12032
-
SHA256
7730b998e3271318f64d36c88a45a2e639f27f14cb6ead48721d3e3f31fe0027
-
SHA512
5850ae7e7220674434536171aa76317f9989b622245d29ea7e75af1eedf1edbc060c915584aa1d8632377deafa6a8f815c49bf0b3b6a94d61e16680b5349a083
-
SSDEEP
49152:GxUz7VvFSH2bgES76j/sCKPqAOBba6TQt1OZn1uTSJLeg84brh/aezpIC1lducwE:GUvgEbkCIuQiHdaezpIC1lduckZZzPA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40ffe07a37c983e28be14f69fd1bc239_JaffaCakes118
Files
-
40ffe07a37c983e28be14f69fd1bc239_JaffaCakes118.exe windows:4 windows x86 arch:x86
d92794859ae42fe659d4240af1bb84c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetLogicalDrives
GetSystemTimeAsFileTime
IsDBCSLeadByte
GetCurrentDirectoryA
GetCurrentDirectoryW
GetWindowsDirectoryA
GetWindowsDirectoryW
GetSystemDirectoryA
GetSystemDirectoryW
GetTempPathA
GetTempPathW
GetModuleHandleW
GetProcessHeap
GetStartupInfoW
GetVersionExW
LoadLibraryA
LoadLibraryW
GetVersion
GetLastError
SetLastError
GetModuleFileNameW
OutputDebugStringA
EnumResourceNamesA
FreeResource
LockResource
LoadResource
SizeofResource
FindResourceA
GetTickCount
FlushFileBuffers
GetFileSize
SetEndOfFile
SetFilePointer
WriteFile
ReadFile
GetVolumeInformationW
SetErrorMode
GetDriveTypeA
GetDriveTypeW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetLocaleInfoA
GetLocaleInfoW
FormatMessageA
FormatMessageW
FreeLibrary
InterlockedExchange
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
ExitProcess
GetCommandLineA
GetStartupInfoA
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeA
GetStringTypeW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetStdHandle
VirtualFree
VirtualAlloc
HeapDestroy
HeapCreate
SetHandleCount
GetFileType
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetOEMCP
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
RemoveDirectoryW
RemoveDirectoryA
DeleteFileW
DeleteFileA
GetFileAttributesExW
GetFileAttributesExA
CreateDirectoryW
CreateDirectoryA
GetFileAttributesW
CreateFileW
GetFileAttributesA
CreateFileA
GetCurrentProcessId
CompareStringW
CompareStringA
IsProcessorFeaturePresent
GlobalMemoryStatus
GetModuleHandleA
GetProcAddress
InterlockedDecrement
InterlockedIncrement
GetVersionExA
GetSystemInfo
GetCurrentProcess
GetProcessAffinityMask
Sleep
SetProcessAffinityMask
CreateThread
GetCurrentThreadId
WaitForSingleObject
SetEvent
CloseHandle
CreateEventA
MultiByteToWideChar
GetACP
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
GetModuleFileNameA
lstrlenA
GetUserDefaultUILanguage
FindFirstFileW
FindNextFileW
GetVolumeInformationA
FindClose
user32
InvalidateRgn
SetCapture
ReleaseCapture
FillRect
DrawTextW
ScrollDC
GetWindowRgn
GetSysColor
CallWindowProcW
IsClipboardFormatAvailable
ChildWindowFromPoint
SendMessageA
DrawFocusRect
DestroyMenu
SetMenuItemInfoW
GetMenuItemInfoW
SetMenuItemInfoA
KillTimer
SetTimer
GetMonitorInfoW
EnumDisplayMonitors
MessageBeep
GetSystemMetrics
GetCursorPos
InsertMenuItemW
LoadImageW
CreateMenu
InsertMenuItemA
RemoveMenu
SetScrollInfo
SetScrollPos
InvalidateRect
DrawFrameControl
MapVirtualKeyW
CopyImage
DestroyCursor
SetCursor
LoadCursorW
RegisterClassW
UnregisterClassW
BeginPaint
EndPaint
WindowFromPoint
ValidateRgn
GetWindowPlacement
IsZoomed
SetWindowTextW
SetWindowTextA
GetWindowRect
GetClientRect
ClientToScreen
DestroyWindow
GetActiveWindow
DefFrameProcW
DefMDIChildProcW
DefWindowProcW
SystemParametersInfoW
SetActiveWindow
BringWindowToTop
GetWindowTextLengthW
GetWindowTextW
GetWindowTextLengthA
GetWindowTextA
MoveWindow
SetWindowLongW
MapWindowPoints
GetUpdateRgn
EnumThreadWindows
IsWindowEnabled
RedrawWindow
CreateWindowExW
UpdateWindow
DrawMenuBar
SetMenu
EnableWindow
SendMessageW
GetParent
GetWindowLongW
GetCaretBlinkTime
GetDoubleClickTime
MessageBoxW
MessageBoxA
GetKeyState
GetAsyncKeyState
GetMessageW
TranslateMDISysAccel
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
PeekMessageW
IsIconic
GetForegroundWindow
SetForegroundWindow
LoadIconW
GetIconInfo
DrawIconEx
DestroyIcon
GetFocus
SetFocus
EnumChildWindows
GetWindowThreadProcessId
IsWindowVisible
CharLowerBuffW
CharLowerBuffA
CharUpperBuffW
CharUpperBuffA
GetDC
GetDesktopWindow
ReleaseDC
UpdateLayeredWindow
ShowWindow
gdi32
SetBrushOrgEx
GetWindowOrgEx
SetStretchBltMode
StretchBlt
GetClipRgn
SetWindowOrgEx
StrokePath
EndPath
LineTo
MoveToEx
BeginPath
FrameRgn
PaintRgn
GetTextExtentPoint32W
TextOutW
SetTextAlign
Rectangle
Ellipse
RoundRect
DeleteDC
CreateFontIndirectA
GetObjectA
CreateFontIndirectW
GetViewportExtEx
RestoreDC
SaveDC
CreateBitmap
GetStockObject
CreateBrushIndirect
SetTextColor
SetBkColor
GetObjectW
GetRgnBox
DeleteObject
GetDeviceCaps
SelectObject
CreateCompatibleDC
SetBkMode
SelectClipRgn
GetTextMetricsW
SetRectRgn
CombineRgn
CreatePen
CreateDIBSection
GetBrushOrgEx
GetBkMode
GetROP2
GetBkColor
GetTextColor
GetCurrentObject
CreateICW
SelectPalette
RealizePalette
CreatePalette
PtInRegion
OffsetRgn
ExtCreatePen
SetROP2
CreateRectRgn
CreatePolygonRgn
advapi32
RegCreateKeyExW
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegSetValueExW
msimg32
AlphaBlend
shell32
SHGetPathFromIDListW
SHBindToParent
SHGetSpecialFolderPathA
SHGetSpecialFolderPathW
ShellExecuteW
DragAcceptFiles
SHBrowseForFolderW
ole32
RevokeDragDrop
RegisterDragDrop
CoCreateInstance
OleInitialize
CoTaskMemFree
Sections
.text Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 636KB - Virtual size: 633KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 48KB - Virtual size: 179KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rrdata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE