e:\rczip_build 2.1\rczip_build 2.1 Chs\trunk\bin\Win32\release\pdb\HaoZip7zSetup.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b137b1a43fa5e089b4cbc6b7db4a7a7e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b137b1a43fa5e089b4cbc6b7db4a7a7e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b137b1a43fa5e089b4cbc6b7db4a7a7e_JaffaCakes118
-
Size
1.6MB
-
MD5
b137b1a43fa5e089b4cbc6b7db4a7a7e
-
SHA1
0dbeb657608c3c2115427a32a68f1fe8bcacfcc1
-
SHA256
58771e9b98e81b819787a6a35e5e72d26e140cca91fb50cf55cb71942734b94e
-
SHA512
e733aca5487f08139ef48782092ca2eaf9498cbd78f7e3c1484c594f146d15b7b36d1496cd7a257ab7d6c52793f9a0c366fb67f08c5f371b95108d3f478f6500
-
SSDEEP
49152:/u8jL2WYP5GHyqf2yu09YtO22RVb0fCnSP1UKtyB:/u8jL2Wk5G1pu0etxA0fmY1UayB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b137b1a43fa5e089b4cbc6b7db4a7a7e_JaffaCakes118
Files
-
b137b1a43fa5e089b4cbc6b7db4a7a7e_JaffaCakes118.exe windows:4 windows x86 arch:x86
889fbee40ab5c3991ffd20511038ed7c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
InitCommonControlsEx
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteW
ShellExecuteExW
CommandLineToArgvW
SHGetFileInfoW
SHGetMalloc
kernel32
SetCurrentDirectoryW
CreateProcessW
GetCurrentDirectoryW
LocalFree
WaitForSingleObject
SetFileApisToOEM
SetPriorityClass
SetThreadPriority
GetLastError
GetEnvironmentVariableW
GetCurrentProcess
GetCurrentThread
GetCommandLineW
GetFileAttributesW
FormatMessageW
GetModuleHandleW
FindResourceW
SetFileAttributesW
RemoveDirectoryW
CreateDirectoryW
DeleteFileW
InterlockedIncrement
InterlockedDecrement
FindFirstFileW
FindClose
FindNextFileW
FileTimeToSystemTime
SetFileTime
SetEndOfFile
WriteFile
GetFileSize
ReadFile
CreateFileW
SetFilePointer
GetCurrentThreadId
ResumeThread
Sleep
GetACP
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
GetProcAddress
GetTempFileNameW
GetLongPathNameW
MoveFileW
CloseHandle
GetWindowsDirectoryW
GetFullPathNameW
GetVersionExW
ExpandEnvironmentStringsW
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSection
LoadLibraryA
HeapReAlloc
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
DeleteCriticalSection
GetModuleFileNameW
GetTempPathW
WaitForMultipleObjects
CreateEventW
SetEvent
ResetEvent
lstrlenW
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapSize
SetLastError
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetSystemTimeAsFileTime
ExitThread
CreateThread
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
user32
GetActiveWindow
LoadStringW
GetDesktopWindow
ScreenToClient
ShowWindow
GetMessageW
IsDialogMessageW
PostQuitMessage
IsWindowVisible
LoadIconW
EnableWindow
CreateDialogParamW
DispatchMessageW
SetTimer
DestroyIcon
SendMessageW
IsWindow
MessageBoxW
SetWindowPos
GetWindowRect
GetSystemMetrics
PostMessageW
DialogBoxParamW
EndDialog
GetWindowTextW
SetWindowTextW
GetDlgItem
KillTimer
TranslateMessage
gdi32
CreateSolidBrush
DeleteObject
advapi32
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
ole32
CoCreateInstance
CoUninitialize
CoTaskMemFree
CoInitialize
CoInitializeEx
Sections
.text Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ