f:\rczip\bin\Win32\release\pdb\HaoZip7zSetup.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ac04418e3df14f98b72cdde8266d6f58_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ac04418e3df14f98b72cdde8266d6f58_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ac04418e3df14f98b72cdde8266d6f58_JaffaCakes118
-
Size
1.9MB
-
MD5
ac04418e3df14f98b72cdde8266d6f58
-
SHA1
69d34fca9697b849fec4f62bfaf1486de84a592c
-
SHA256
17362ed9e54eddb0a6707b0b8e35f595df583dcc39c54f482eb834c9afcdaac6
-
SHA512
4ebcf30ffa3b07723590aa6c264e6f0ef2f4b624ce12089c5faee76ef12ee945649430765b1f828c305073183752ecb84e59fed2a377a74c24671d8ba804f1fe
-
SSDEEP
49152:Utg2L4vj+MVbB0ccUvlPaxrxNP2iyaRhWM4NVIQKw/zpvKDVEZ:Utg2LQj+Mj0NxrxhyaANVgwoVEZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac04418e3df14f98b72cdde8266d6f58_JaffaCakes118
Files
-
ac04418e3df14f98b72cdde8266d6f58_JaffaCakes118.exe windows:4 windows x86 arch:x86
3d98d7501480b5559f4125be4e9c8869
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
InitCommonControlsEx
shell32
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetPathFromIDListW
CommandLineToArgvW
ShellExecuteW
ShellExecuteExW
SHGetFileInfoW
SHGetMalloc
kernel32
SetCurrentDirectoryW
WaitForSingleObject
GetCurrentDirectoryW
CreateProcessW
LocalFree
SetFileApisToOEM
SetThreadPriority
GetCurrentThread
GetLastError
SetPriorityClass
GetCurrentProcess
GetEnvironmentVariableW
GetCommandLineW
GetFileAttributesW
FormatMessageW
RemoveDirectoryW
CreateDirectoryW
DeleteFileW
SetFileAttributesW
InterlockedExchangeAdd
FindFirstFileW
FindClose
FindNextFileW
FreeLibrary
GetProcAddress
LoadLibraryW
GetModuleHandleW
SetFilePointer
SetEndOfFile
SetFileTime
WriteFile
GetFileSize
ReadFile
CreateFileW
GetCurrentThreadId
ResumeThread
Sleep
MultiByteToWideChar
WideCharToMultiByte
GetACP
lstrlenW
GetTempPathW
GetWindowsDirectoryW
GetFullPathNameW
GetTempFileNameW
GetLongPathNameW
CloseHandle
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetVersionExW
FindResourceW
FileTimeToSystemTime
ExpandEnvironmentStringsW
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
LoadLibraryA
HeapReAlloc
VirtualAlloc
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
GetModuleFileNameW
MoveFileW
WaitForMultipleObjects
CreateEventW
SetEvent
ResetEvent
HeapDestroy
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetSystemTimeAsFileTime
ExitThread
CreateThread
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
user32
GetActiveWindow
LoadStringW
GetDesktopWindow
DispatchMessageW
KillTimer
CreateDialogParamW
IsDialogMessageW
ScreenToClient
IsWindowVisible
GetMessageW
LoadIconW
PostQuitMessage
TranslateMessage
DestroyIcon
SendMessageW
IsWindow
MessageBoxW
ShowWindow
PostMessageW
DialogBoxParamW
GetSystemMetrics
GetWindowRect
SetWindowPos
EndDialog
GetWindowTextW
SetWindowTextW
GetDlgItem
EnableWindow
SetTimer
gdi32
DeleteObject
CreateSolidBrush
advapi32
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegSetValueExW
ole32
CoCreateInstance
CoUninitialize
CoTaskMemFree
CoInitialize
CoInitializeEx
Sections
.text Size: 280KB - Virtual size: 279KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ