h:\work\VRM2009\AntiMalwareMaster\Release (download paid version)\vrm.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6f03148a8aba34f524407ea497a8aad5_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
6f03148a8aba34f524407ea497a8aad5_JaffaCakes118
-
Size
3.2MB
-
MD5
6f03148a8aba34f524407ea497a8aad5
-
SHA1
ab9064e78e821eaabc5dcf83cc84830f69a8b6cb
-
SHA256
6dfa170f761860264c637c1a442ea27cdd9b3cf5d1422d5110d6785938b89e84
-
SHA512
f74f74c5dd8aa0d7695ce2d784dd4c3dce7fd11d9d68764c05a56afc54d4b6661976d85779b1c01af2551ecd7b26ad5221dd820f8689121d411c3aab1598ba26
-
SSDEEP
49152:gqbrjAhQcmkd+NTfUrmX7IxlUg+4xcmBTFx9q:rbrshEbFsHe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f03148a8aba34f524407ea497a8aad5_JaffaCakes118
Files
-
6f03148a8aba34f524407ea497a8aad5_JaffaCakes118.exe windows:4 windows x86 arch:x86
d7f354563c5a8f5831e920ff7876775b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetCurrentThread
FileTimeToLocalFileTime
SetFileAttributesA
GetFileTime
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
SetErrorMode
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
ExitProcess
SetStdHandle
GetFileType
HeapSize
GetStdHandle
GetACP
ConvertDefaultLocale
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetLocaleInfoW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
EnumResourceLanguagesA
GetModuleFileNameW
GetFullPathNameA
SetEndOfFile
UnlockFile
LockFile
SystemTimeToFileTime
FileTimeToSystemTime
GetThreadLocale
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
FormatMessageA
RaiseException
GetSystemTime
GetCurrentDirectoryA
OutputDebugStringA
ExitThread
GetFileAttributesA
FindResourceExW
FindResourceW
VirtualProtect
WriteProcessMemory
InterlockedCompareExchange
GetLocaleInfoA
FreeLibrary
InterlockedDecrement
InterlockedIncrement
lstrcatA
SetLastError
GetVersionExA
LoadLibraryA
GetProcAddress
GetCurrentThreadId
CompareFileTime
LoadLibraryW
GetFileAttributesW
CreateFileW
GetTempPathW
LockFileEx
DeleteFileW
GetFullPathNameW
SetFilePointer
FlushFileBuffers
GetExitCodeThread
TerminateThread
GetVolumeInformationA
WritePrivateProfileStringA
CreateProcessA
GlobalLock
GlobalUnlock
MulDiv
GlobalFree
GlobalAlloc
CreateWaitableTimerA
SetWaitableTimer
WaitForMultipleObjects
ResetEvent
GetSystemDirectoryA
ResumeThread
SuspendThread
lstrcpyA
WriteFile
GetCommandLineA
lstrcpynA
GetLocalTime
GetComputerNameA
ReleaseSemaphore
HeapFree
GetProcessHeap
AreFileApisANSI
GetWindowsDirectoryA
GetFileInformationByHandle
PeekNamedPipe
HeapAlloc
GetCurrentProcess
DuplicateHandle
CreateSemaphoreA
GetCurrentProcessId
ReleaseMutex
GetSystemTimeAsFileTime
CreateEventA
CreateThread
WaitForSingleObject
SetEvent
GetStringTypeExA
lstrcmpiA
CompareStringW
CompareStringA
GetVersion
InterlockedExchange
CreateDirectoryA
CopyFileA
DeleteFileA
RemoveDirectoryA
GetTempPathA
lstrlenW
GetTickCount
FreeResource
GetModuleHandleA
FindFirstFileA
FindNextFileA
FindClose
lstrlenA
MultiByteToWideChar
FindResourceExA
lstrcmpA
GetPrivateProfileIntA
GetDateFormatA
GetTimeFormatA
GetPrivateProfileStringA
GetPrivateProfileSectionNamesA
UnmapViewOfFile
GetFileSize
CreateFileMappingA
MapViewOfFileEx
ReadFile
CreateFileA
FindResourceA
LoadResource
LockResource
SizeofResource
LocalAlloc
LocalFree
Sleep
InitializeCriticalSection
CreateMutexA
GetLastError
CloseHandle
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
lstrcmpW
IsValidCodePage
GetModuleFileNameA
user32
SetDlgItemTextA
GetMenuCheckMarkDimensions
ModifyMenuA
CheckMenuItem
SendDlgItemMessageA
WinHelpA
IsChild
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
GetLastActivePopup
GetTopWindow
GetMessageTime
GetMessagePos
GetMenu
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
EqualRect
GetScrollInfo
SetWindowPlacement
IntersectRect
GetMenuStringA
DefWindowProcA
DestroyWindow
PostThreadMessageA
wsprintfA
EndDialog
EnumWindows
MsgWaitForMultipleObjects
GetWindowPlacement
GetWindowTextA
GetActiveWindow
GetDlgItem
GetAsyncKeyState
GetKeyState
DrawFocusRect
GetComboBoxInfo
DestroyCursor
LoadMenuA
IsWindowEnabled
SetFocus
EnableScrollBar
SetScrollPos
MapWindowPoints
CallWindowProcA
IsDialogMessageA
GetClassInfoA
DestroyMenu
IsRectEmpty
GrayStringA
GetMenuItemID
SetMenuDefaultItem
EnableMenuItem
SetRect
GetSubMenu
WindowFromPoint
LoadImageW
LoadImageA
LoadCursorW
LoadIconW
LoadBitmapW
LoadStringW
GetFocus
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
SystemParametersInfoA
TrackPopupMenuEx
TrackPopupMenu
SetRectEmpty
GetMenuItemRect
UnionRect
FrameRect
SetMenuItemInfoA
SetMenuItemBitmaps
GetMenuItemInfoA
GetMenuDefaultItem
InflateRect
GetMenuItemCount
GetMenuState
IsMenu
InsertMenuItemA
OffsetRect
CopyImage
LookupIconIdFromDirectoryEx
CreateIconFromResourceEx
ValidateRect
GetClassNameA
FindWindowExA
LoadBitmapA
GetSystemMenu
DrawStateA
DestroyIcon
ReleaseCapture
SetCapture
PtInRect
DrawTextA
CopyRect
ClientToScreen
ScreenToClient
GetWindowThreadProcessId
AttachThreadInput
SetWindowTextA
MoveWindow
CharNextA
GetNextDlgTabItem
CreateDialogIndirectParamA
GetKeyNameTextA
MapVirtualKeyA
TabbedTextOutA
RegisterClipboardFormatA
GetNextDlgGroupItem
MessageBeep
UnregisterClassA
InvalidateRgn
GetForegroundWindow
SetActiveWindow
GetSysColor
RegisterClassExA
CreateWindowExA
BeginPaint
EndPaint
InvalidateRect
RedrawWindow
CopyAcceleratorTableA
SetWindowContextHelpId
MapDialogRect
GetMessageA
GetSysColorBrush
PostQuitMessage
GetDesktopWindow
GetWindowLongA
SetWindowLongA
SetLayeredWindowAttributes
GetDC
RegisterWindowMessageA
RegisterHotKey
GetCursorPos
IsZoomed
DrawTextExA
UnregisterHotKey
SetForegroundWindow
SetParent
BringWindowToTop
AppendMenuA
CreatePopupMenu
ShowWindow
SetCursor
GetWindow
FindWindowA
MessageBoxA
SetWindowPos
TranslateMessage
DispatchMessageA
PeekMessageA
CharUpperA
SetWindowRgn
GetDlgCtrlID
GetSystemMetrics
GetParent
IsIconic
SendMessageA
DrawIcon
LoadIconA
LoadCursorA
PostMessageA
CharLowerBuffA
IsWindowVisible
UpdateWindow
GetClientRect
FillRect
IsWindow
GetWindowRect
GetWindowDC
ReleaseDC
LoadStringA
wsprintfW
KillTimer
EnableWindow
SetTimer
GetCapture
gdi32
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
ExtTextOutA
PatBlt
CreateRectRgnIndirect
GetTextMetricsA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
ExcludeClipRect
RestoreDC
SaveDC
GetClipBox
DeleteObject
GetRgnBox
SetPixel
GetBitmapBits
SetBitmapBits
GetPixel
CreateBrushIndirect
MoveToEx
LineTo
GetTextColor
CreateDIBitmap
GetBkColor
GetBkMode
TextOutA
CreateEllipticRgn
Rectangle
ExtCreatePen
CreatePen
CombineRgn
SetBkMode
SetTextColor
SetStretchBltMode
DPtoLP
CreateBitmap
GetMapMode
SetMapMode
SetBkColor
CreateFontIndirectA
GetDIBits
GetDeviceCaps
CreateSolidBrush
CreateRectRgn
GetStockObject
GetTextExtentPoint32A
CreateFontA
GetObjectA
CreateCompatibleDC
SelectObject
CreateCompatibleBitmap
BitBlt
StretchBlt
DeleteDC
msimg32
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegEnumKeyA
RegOpenKeyExA
RegQueryValueExA
GetUserNameA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueA
RegCloseKey
RegOpenKeyA
RegEnumKeyExA
RegQueryInfoKeyA
RegEnumValueA
shell32
SHGetSpecialFolderPathA
ShellExecuteA
Shell_NotifyIconA
ShellExecuteExA
SHAppBarMessage
SHGetFolderPathA
comctl32
ord17
ImageList_GetIconSize
ImageList_Draw
ImageList_DrawEx
ImageList_GetImageInfo
_TrackMouseEvent
ImageList_AddMasked
ImageList_GetImageCount
shlwapi
StrCmpNIW
PathAppendA
PathAddBackslashA
PathRemoveFileSpecA
PathStripPathA
PathFileExistsA
PathIsDirectoryA
PathFindExtensionA
PathRemoveExtensionA
PathCombineA
StrToIntA
PathStripToRootA
PathIsUNCA
PathFindFileNameA
oledlg
ord8
ole32
CLSIDFromProgID
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoTaskMemAlloc
CoRevokeClassObject
OleIsCurrentClipboard
CoTaskMemFree
CreateStreamOnHGlobal
OleRun
StringFromGUID2
CoInitialize
CoInitializeEx
CoCreateInstance
CoUninitialize
OleFlushClipboard
CoRegisterMessageFilter
CLSIDFromString
oleaut32
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SysFreeString
SysAllocString
SysAllocStringLen
SysStringLen
VarBstrCmp
VariantInit
VariantClear
SysAllocStringByteLen
OleLoadPicture
VariantCopy
VariantChangeType
SafeArrayGetVartype
SafeArrayGetUBound
SafeArrayGetLBound
urlmon
ObtainUserAgentString
dbghelp
ImageDirectoryEntryToData
wininet
InternetQueryOptionA
InternetGetConnectedState
HttpSendRequestA
FindNextUrlCacheEntryExA
InternetCrackUrlA
FindCloseUrlCache
FindFirstUrlCacheEntryExA
InternetReadFile
InternetGetLastResponseInfoA
InternetCanonicalizeUrlA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetConnectA
InternetOpenA
InternetSetOptionA
InternetCloseHandle
InternetOpenUrlA
HttpQueryInfoA
InternetGetCookieA
InternetSetCookieA
iphlpapi
GetAdaptersInfo
IcmpCreateFile
IcmpSendEcho
ws2_32
gethostbyname
WSACleanup
WSAStartup
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
rpcrt4
UuidCreate
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 280KB - Virtual size: 279KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 541B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ