f:\checkpoints\TPDrv\Do_Not_Release_v10_0_13_2\Access\SynZMetr\Release\SynZMetr.pdb
Static task
static1
Behavioral task
behavioral1
Sample
663765d3323a03e8dbdbf715de9053f0_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
663765d3323a03e8dbdbf715de9053f0_JaffaCakes118
-
Size
336KB
-
MD5
663765d3323a03e8dbdbf715de9053f0
-
SHA1
0f1bb3b2675dbd65e3a3cf46fb47a8ccb706ecd8
-
SHA256
a675eae6b54157d8f00d3e5f957d4e371f924bc8932cf2a0bea3975847ddd297
-
SHA512
ec81a1d915f95aeb7e5585d1ae1865ad58ca89f834ee242418ca3102495a28b721ad089384887468b331ab3dc9cd44703e27f838fb24edd26aab3740462d5f75
-
SSDEEP
6144:60K66q4ROt35CWV+bsHkOV6tNtqCOZbd7MjjRxf7p:6pOt3M+kOkBMpMj997p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 663765d3323a03e8dbdbf715de9053f0_JaffaCakes118
Files
-
663765d3323a03e8dbdbf715de9053f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
04e6010f35afae234268b404086e090f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
kernel32
GetCurrentProcess
SetErrorMode
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
RtlUnwind
RaiseException
ExitProcess
HeapReAlloc
HeapSize
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
WritePrivateProfileStringW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GlobalFlags
FormatMessageW
GlobalFree
GetCurrentProcessId
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
WideCharToMultiByte
InterlockedExchange
GlobalAlloc
lstrlenW
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
GetLastError
lstrcmpW
GetModuleHandleW
GetVersionExA
GlobalLock
GlobalUnlock
MulDiv
GetModuleHandleA
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
CreateThread
SetThreadPriority
WaitForSingleObjectEx
GetModuleFileNameW
InterlockedIncrement
InterlockedDecrement
SetEvent
WaitForSingleObject
TerminateThread
CreateEventW
GetSystemDirectoryW
LoadLibraryW
GetProcAddress
FreeLibrary
GetTickCount
LocalAlloc
LocalFree
SetLastError
DeviceIoControl
CloseHandle
CreateFileW
LeaveCriticalSection
EnterCriticalSection
GetVersionExW
DeleteCriticalSection
InitializeCriticalSection
GetCommandLineW
user32
UnregisterClassW
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
SetCursor
GetMessageW
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
IsWindowEnabled
ShowWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
IsWindow
SetFocus
GetWindowTextLengthW
GetSysColorBrush
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
GetDlgItem
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
UnregisterClassA
MapWindowPoints
ScrollWindow
GetKeyState
SetForegroundWindow
IsWindowVisible
GetMenu
GetMenuItemID
GetMenuItemCount
MessageBoxW
GetClassInfoExW
GetClassInfoW
AdjustWindowRectEx
GetParent
CopyRect
PtInRect
GetDlgCtrlID
CallWindowProcW
GetWindowLongW
SetWindowLongW
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindow
GetSysColor
EndPaint
BeginPaint
ReleaseDC
DestroyMenu
GetWindowTextW
GetDesktopWindow
GetDC
ClientToScreen
ScreenToClient
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
PostQuitMessage
GetSystemMetrics
LoadIconW
IsIconic
GetSystemMenu
SendMessageW
AppendMenuW
DrawIcon
CreateWindowExW
PeekMessageW
DestroyWindow
wsprintfW
DefWindowProcW
PostMessageW
LoadCursorW
RegisterClassW
EnableWindow
UpdateWindow
GetClientRect
GetSubMenu
GetMessagePos
gdi32
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
CreateBitmap
CreateCompatibleDC
GetDeviceCaps
BitBlt
GetObjectW
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
SaveDC
GetStockObject
SelectObject
CreatePen
DeleteObject
MoveToEx
LineTo
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
PtVisible
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
advapi32
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
shlwapi
PathFindExtensionW
PathFindFileNameW
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 148KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE