dpapimig.pdb
Behavioral task
behavioral1
Sample
b3b0f97d2d513d90c0007d8459856baa_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b3b0f97d2d513d90c0007d8459856baa_JaffaCakes118
-
Size
505KB
-
MD5
b3b0f97d2d513d90c0007d8459856baa
-
SHA1
62cc42f5be2aee67029c08c66182abadeef5216c
-
SHA256
2edbcbfe1a35de39630a198e207f275bdde95f82edd535a89a6ef30d44dbbcdd
-
SHA512
509d4b964e529096d0537e4f8c5b3a2a97d520790e943e0bea705aed55d0334f6c16604593baae35fe3946aefcb2ec02715d6505046b14c3987630d2aaebbf1b
-
SSDEEP
6144:bZvu7A2c9Pl+ksbL6St6I8+CZQuovoqswT+u/4S4+TRGpGw0dm:bZW7AtlxorCSuhn+50
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3b0f97d2d513d90c0007d8459856baa_JaffaCakes118
Files
-
b3b0f97d2d513d90c0007d8459856baa_JaffaCakes118.exe windows:6 windows x86 arch:x86
a5f5bdadeaad0c64d8ccd8aca7876c51
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
advapi32
ConvertStringSidToSidW
RegCloseKey
RegDeleteTreeW
RegOpenKeyExW
ConvertSidToStringSidW
IsValidSid
CopySid
GetLengthSid
GetTokenInformation
OpenProcessToken
OpenThreadToken
GetSidSubAuthority
GetSidIdentifierAuthority
GetSidSubAuthorityCount
RegEnumValueW
RegEnumKeyExW
TraceEvent
RegQueryValueExW
kernel32
GetProcessHeap
HeapCreate
FreeLibraryAndExitThread
CreateThread
GetModuleHandleExW
IsProcessorFeaturePresent
CompareStringW
GetThreadLocale
OutputDebugStringA
GetSystemDirectoryW
GlobalFree
FormatMessageW
GlobalUnlock
GlobalLock
GlobalAlloc
FindResourceW
GetModuleFileNameA
VirtualQueryEx
InitializeCriticalSectionAndSpinCount
SetProcessWorkingSetSize
GetLocaleInfoW
GetUserDefaultUILanguage
GetThreadUILanguage
DebugBreak
TlsAlloc
TlsFree
HeapDestroy
InterlockedDecrement
TlsSetValue
InterlockedIncrement
GetVersion
LoadLibraryExW
DeleteCriticalSection
InitializeCriticalSection
LoadLibraryW
FreeLibrary
FindAtomW
MultiByteToWideChar
GetAtomNameW
GetModuleHandleW
GetProcAddress
LeaveCriticalSection
EnterCriticalSection
lstrlenW
MulDiv
HeapReAlloc
DeleteAtom
AddAtomW
FindResourceExW
LoadResource
LockResource
SizeofResource
TlsGetValue
HeapFree
HeapAlloc
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
GetCurrentThread
InterlockedExchange
GetCurrentProcess
CloseHandle
GetCommandLineW
LocalFree
GetLastError
LocalAlloc
CompareStringOrdinal
user32
IsRectEmpty
IntersectRect
NotifyWinEvent
ScreenToClient
DrawFrameControl
InflateRect
FillRect
DrawTextW
GetKeyNameTextW
MapVirtualKeyW
DrawFocusRect
DrawIconEx
CopyRect
SetRectEmpty
ShowWindow
SetFocus
IsChild
GetFocus
GetKeyState
GetClientRect
GetWindowLongW
DefWindowProcW
RegisterClassExW
LoadCursorW
GetClassInfoExW
DestroyWindow
SetParent
CreateWindowExW
RedrawWindow
SetWindowTextW
UpdateWindow
SetWindowRgn
GetWindowRgnBox
MapWindowPoints
GetWindowRect
GetParent
CharUpperA
CharUpperW
SetTimer
ClientToScreen
AdjustWindowRectEx
EnumChildWindows
KillTimer
SetCursor
GetMessagePos
InvalidateRect
IsCharAlphaNumericW
SetScrollInfo
ReleaseDC
DestroyIcon
PostMessageW
LoadStringW
MessageBoxW
RegisterWindowMessageW
GetSystemMetrics
GetWindowTextLengthW
GetWindowTextW
EnableWindow
SetPropW
CallWindowProcW
GetPropW
SetWindowLongW
RemovePropW
IsWindow
SendMessageW
GetDC
GetSysColor
GetSysColorBrush
EqualRect
LoadImageW
GetIconInfo
SetRect
SetWindowPos
CreateIconIndirect
SystemParametersInfoW
msvcrt
_purecall
memcpy
_ftol2
_vsnprintf
_wcsnicmp
realloc
iswalpha
_isnan
_ftol2_sse
iswalnum
_vsnwprintf
_wcsdup
wcschr
_controlfp
?terminate@@YAXXZ
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
memset
??2@YAPAXI@Z
wcsncmp
??3@YAXPAX@Z
free
qsort
memmove
_wcsicmp
wcstol
crypt32
CryptUpdateProtectedState
ole32
CoDisconnectObject
CreateStreamOnHGlobal
CoCreateInstance
CoInitializeEx
CLSIDFromString
CoUninitialize
CoInitialize
comctl32
ord345
PropertySheetW
shell32
CommandLineToArgvW
netapi32
NetApiBufferFree
NetUserModalsGet
gdi32
RectVisible
GdiGetCharDimensions
LPtoDP
StretchDIBits
CreateDIBPatternBrushPt
GetBkColor
SetLayout
CreateFontIndirectW
CreateRectRgn
OffsetRgn
GetRgnBox
GetRegionData
ExtCreateRegion
CombineRgn
GetBkMode
OffsetWindowOrgEx
SetWindowOrgEx
CreateSolidBrush
CreatePatternBrush
GetTextExtentPoint32W
PlayEnhMetaFile
BitBlt
ExtTextOutW
GetTextColor
GetLayout
GetTextAlign
SetTextAlign
GetStockObject
SetTextColor
SetBkColor
SetBkMode
GdiTransparentBlt
GdiGradientFill
GdiAlphaBlend
PatBlt
GetTextMetricsW
GetDIBits
CreateHalftonePalette
SelectPalette
RealizePalette
GetBrushOrgEx
SetStretchBltMode
SetBrushOrgEx
GetDeviceCaps
DeleteEnhMetaFile
CreateDIBSection
CreateCompatibleBitmap
StretchBlt
GetObjectW
CreateCompatibleDC
SelectObject
GetPixel
DeleteDC
DeleteObject
oleacc
AccessibleObjectFromWindow
ObjectFromLresult
CreateStdAccessibleObject
GetRoleTextW
LresultFromObject
oleaut32
SafeArrayUnaccessData
SysAllocString
VariantInit
SysFreeString
SysStringLen
SysAllocStringLen
VariantClear
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetVartype
SafeArrayGetDim
SafeArrayCreateVector
shlwapi
PathAppendW
PathCreateFromUrlW
uxtheme
GetThemeAppProperties
GetThemeMargins
GetThemeFont
GetThemeColor
GetThemeMetric
GetThemePartSize
ord47
DrawThemeTextEx
BeginBufferedPaint
GetBufferedPaintBits
BufferedPaintClear
EndBufferedPaint
BufferedPaintUnInit
CloseThemeData
OpenThemeData
BufferedPaintInit
IsAppThemed
duser
FindStdColor
UtilDrawBlendRect
MapGadgetPoints
FindGadgetFromPoint
GetGadgetTicket
SetGadgetBufferInfo
DetachWndProc
DUserFlushDeferredMessages
InitGadgets
GetStdColorI
GetStdColorBrushI
CreateGadget
SetGadgetFocusEx
BuildInterpolation
BuildAnimation
ForwardGadgetMessage
DeleteHandle
GetGadgetAnimation
GetGadgetFocus
SetGadgetFocus
GetGadgetRect
DUserPostEvent
DUserSendEvent
SetGadgetStyle
SetGadgetMessageFilter
SetGadgetParent
SetGadgetRect
InvalidateGadget
AttachWndProcW
CreateAction
LookupGadgetTicket
GetGadgetSize
GetGadgetRgn
SetGadgetRootInfo
DUserFlushMessages
Sections
.text Size: 315KB - Virtual size: 314KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 48KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.UPX0 Size: 108KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE