f:\haozip2.4\build\rczip\bin\Win32\release\pdb\HaoZip7zSetup.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8e5ea526bb7d59d8db1a0457523d21d9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8e5ea526bb7d59d8db1a0457523d21d9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8e5ea526bb7d59d8db1a0457523d21d9_JaffaCakes118
-
Size
577KB
-
MD5
8e5ea526bb7d59d8db1a0457523d21d9
-
SHA1
c8919118171ebe8141735e85ba625678238a4cbf
-
SHA256
5288a25c9cf55a507789a95bd57cbb0c2fa429c6bb10f45f8c47efad38be3cf2
-
SHA512
8e2b4dba427f2ba587674baf423951238ad8b9316c3160d7b552184811c39aacfb609dfdefa23b837b3f5f810742fb5b238766fde4d530b2307cf3c88eb9a27a
-
SSDEEP
12288:j3lhEKwgFd25wWUENWLy60jezEClolpgN2XzloI8ulOUViOOdKz+8q:52LgO5wdEN36jhlolpg4Zn8ulOOi9arq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e5ea526bb7d59d8db1a0457523d21d9_JaffaCakes118
Files
-
8e5ea526bb7d59d8db1a0457523d21d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
76ff84ab9bc3205bf672693e1378c426
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
InitCommonControlsEx
shell32
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListW
ShellExecuteW
ShellExecuteExW
CommandLineToArgvW
SHGetFileInfoW
SHBrowseForFolderW
kernel32
SetCurrentDirectoryW
CreateProcessW
CloseHandle
GetCurrentDirectoryW
LocalFree
SetFileApisToOEM
GetCurrentThread
SetThreadPriority
GetLastError
SetPriorityClass
GetEnvironmentVariableW
GetCurrentProcess
GetCommandLineW
GetFileAttributesW
FormatMessageW
SetFileAttributesW
RemoveDirectoryW
CreateDirectoryW
DeleteFileW
InterlockedExchangeAdd
FindFirstFileW
FindClose
FindNextFileW
GetModuleHandleW
FreeLibrary
GetProcAddress
LoadLibraryW
CreateFileW
SetFilePointer
SetEndOfFile
SetFileTime
WriteFile
GetFileSize
ReadFile
GetCurrentThreadId
ResumeThread
Sleep
GetACP
MultiByteToWideChar
WideCharToMultiByte
MoveFileW
lstrlenW
GetTempPathW
GetWindowsDirectoryW
GetFullPathNameW
GetTempFileNameW
WaitForSingleObject
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetVersionExW
FindResourceW
FileTimeToSystemTime
ExpandEnvironmentStringsW
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
LoadLibraryA
HeapReAlloc
VirtualAlloc
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
GetModuleFileNameW
GetLongPathNameW
WaitForMultipleObjects
CreateEventW
SetEvent
ResetEvent
HeapDestroy
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapSize
InterlockedDecrement
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetSystemTimeAsFileTime
ExitThread
CreateThread
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
user32
GetActiveWindow
LoadStringW
GetDesktopWindow
GetMessageW
IsDialogMessageW
CreateDialogParamW
PostQuitMessage
DispatchMessageW
EnableWindow
LoadIconW
TranslateMessage
SetTimer
KillTimer
DestroyIcon
IsWindow
SendMessageW
MessageBoxW
ShowWindow
PostMessageW
DialogBoxParamW
GetSystemMetrics
GetWindowRect
SetWindowPos
EndDialog
GetWindowTextW
SetWindowTextW
GetDlgItem
IsWindowVisible
ScreenToClient
gdi32
DeleteObject
CreateSolidBrush
advapi32
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegSetValueExW
ole32
CoInitialize
CoCreateInstance
CoTaskMemFree
CoUninitialize
CoInitializeEx
Sections
.text Size: 282KB - Virtual size: 281KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ