d:\Plugins for Browsers\facerange\Sources FTP Database\installers\orange button installapi\Release\Xvid Installation.pdb
Static task
static1
Behavioral task
behavioral1
Sample
62dbeb465ea53b2d03504795f6b14894_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
62dbeb465ea53b2d03504795f6b14894_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
62dbeb465ea53b2d03504795f6b14894_JaffaCakes118
-
Size
770KB
-
MD5
62dbeb465ea53b2d03504795f6b14894
-
SHA1
728effa05fd79cc8a1fd6ab5b573248c9ac5bb35
-
SHA256
34e2a519f4d6d0b0f7df0876b3bf7b3e935d1ae964733f49347c0d08e540dd14
-
SHA512
2be1701dc3f12ed4322e3921f020d28e156701672ae33189e38c00e5eec776a9c40498bc43a5bb1cdf9550f28f2274d1311aa60aaa5c1109d4e363677c2781d8
-
SSDEEP
12288:Su6fwaliKDua9pGHNu4B2US9pGHNu4B2Ug:Su6fweiKD6I4rrI4rg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62dbeb465ea53b2d03504795f6b14894_JaffaCakes118
Files
-
62dbeb465ea53b2d03504795f6b14894_JaffaCakes118.exe windows:5 windows x86 arch:x86
b475f36670074431b024747d9a80ad3b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
wininet
InternetCloseHandle
InternetReadFile
InternetQueryDataAvailable
HttpQueryInfoW
HttpQueryInfoA
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetConnectA
InternetOpenA
kernel32
WriteFile
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
HeapReAlloc
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
DeleteCriticalSection
GetFileType
CreateFileA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapSize
LCMapStringW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
IsValidCodePage
ResumeThread
CreateThread
CreateDirectoryA
Sleep
GetLastError
WaitForSingleObject
GetProcAddress
LoadLibraryA
CloseHandle
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
HeapFree
user32
SetWindowTextA
SendMessageA
GetDlgItem
SetWindowPos
OffsetRect
CopyRect
GetWindowRect
GetDesktopWindow
GetParent
EndDialog
GetDlgCtrlID
GetSysColor
DialogBoxParamA
GetClientRect
SetCursor
PostMessageA
InvalidateRect
PtInRect
SetWindowRgn
LoadBitmapA
SetRect
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcA
DestroyWindow
UpdateWindow
ShowWindow
MessageBoxA
SetWindowLongA
GetWindowLongA
CreateWindowExA
GetSystemMetrics
RegisterClassExA
LoadCursorA
TranslateAcceleratorA
LoadAcceleratorsA
TranslateMessage
DispatchMessageA
GetMessageA
LoadStringA
gdi32
SetBkMode
ExtTextOutA
SetBkColor
DeleteDC
DeleteObject
BitBlt
LineTo
MoveToEx
CreatePen
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectA
CreateSolidBrush
CreateRectRgn
advapi32
RegCloseKey
RegSetValueExA
RegCreateKeyA
RegQueryValueExA
RegOpenKeyA
shell32
ShellExecuteA
ShellExecuteExA
SHGetSpecialFolderPathA
shlwapi
PathFileExistsA
Sections
.text Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 690KB - Virtual size: 689KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ