d:\Release 6302\rczip\trunk\bin\Win32\release\pdb\HaoZip7zSetup.pdb
Static task
static1
Behavioral task
behavioral1
Sample
46da254248bc8b77c2cc13834c797aea_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
46da254248bc8b77c2cc13834c797aea_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
46da254248bc8b77c2cc13834c797aea_JaffaCakes118
-
Size
532KB
-
MD5
46da254248bc8b77c2cc13834c797aea
-
SHA1
2e9f566dbe69c48496e98054f9aaf20f70bd1ac2
-
SHA256
ae561f3a14194331a6f19cb31efda1052350caff9b1eb76a98c2fc34e63c94c1
-
SHA512
782792c927396f9644be35f2e60d35560a9f25b8217c4d2836c6abe4348550bef5b43cfd0c5de7de570a4fb8d94614ecd768bb85142743fe1336c4adb82e7b9a
-
SSDEEP
12288:m29f7c2EdU/YP94S7yIZTSE8iTwte6iZKF0Tv6U/DkNDt3V:rJ4ZdHPeJINS9qwg6iZKFy6U/QNb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46da254248bc8b77c2cc13834c797aea_JaffaCakes118
Files
-
46da254248bc8b77c2cc13834c797aea_JaffaCakes118.exe windows:4 windows x86 arch:x86
fa3c4605a85966a8d1236425992cbd84
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
InitCommonControlsEx
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteW
ShellExecuteExW
CommandLineToArgvW
SHGetFileInfoW
SHBrowseForFolderW
kernel32
CloseHandle
SetCurrentDirectoryW
LocalFree
GetCurrentDirectoryW
WaitForSingleObject
SetFileApisToOEM
SetPriorityClass
GetCurrentProcess
GetEnvironmentVariableW
SetThreadPriority
GetCurrentThread
GetLastError
GetCommandLineW
GetFileAttributesW
FormatMessageW
SetFileAttributesW
RemoveDirectoryW
CreateDirectoryW
DeleteFileW
InterlockedExchangeAdd
FindClose
FindFirstFileW
FindNextFileW
GetModuleHandleW
FreeLibrary
GetProcAddress
LoadLibraryW
SetFileTime
SetEndOfFile
WriteFile
ReadFile
GetFileSize
CreateFileW
SetFilePointer
Sleep
GetCurrentThreadId
ResumeThread
WideCharToMultiByte
GetACP
MultiByteToWideChar
GetFullPathNameW
GetTempFileNameW
GetLongPathNameW
MoveFileW
lstrlenW
CreateProcessW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetVersionExW
FindResourceW
FileTimeToSystemTime
ExpandEnvironmentStringsW
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
LoadLibraryA
HeapReAlloc
VirtualAlloc
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
GetModuleFileNameW
GetWindowsDirectoryW
WaitForMultipleObjects
CreateEventW
SetEvent
ResetEvent
GetTempPathW
HeapDestroy
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetSystemTimeAsFileTime
ExitThread
CreateThread
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
user32
GetActiveWindow
LoadStringW
GetDesktopWindow
CreateDialogParamW
EnableWindow
SetTimer
IsWindowVisible
IsDialogMessageW
ScreenToClient
GetMessageW
LoadIconW
TranslateMessage
PostQuitMessage
DestroyIcon
SendMessageW
IsWindow
MessageBoxW
ShowWindow
SetWindowPos
GetWindowRect
PostMessageW
GetSystemMetrics
DialogBoxParamW
EndDialog
GetWindowTextW
SetWindowTextW
GetDlgItem
KillTimer
DispatchMessageW
gdi32
CreateSolidBrush
DeleteObject
advapi32
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
ole32
CoUninitialize
CoInitialize
CoTaskMemFree
CoCreateInstance
CoInitializeEx
Sections
.text Size: 277KB - Virtual size: 277KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ