msoxmled.pdb
Static task
static1
Behavioral task
behavioral1
Sample
bce1f545f23f70935a2f758bd488eaaf_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
bce1f545f23f70935a2f758bd488eaaf_JaffaCakes118
-
Size
122KB
-
MD5
bce1f545f23f70935a2f758bd488eaaf
-
SHA1
2a431bd333f9aee6148c1277bd2d911d63f5d608
-
SHA256
27e7a1cf97ccef1eeaf7fa62625eaa093beb2237ea9591639badf7312dd20fb6
-
SHA512
5b3c2783c5996fadaaf9840529477570dfa74f8256062fec7347051d4b31a9003523d81b3e6782a93ecfb5ba128a7137ddf53803264985a197fbf8e60f1de540
-
SSDEEP
3072:7fW0pnJhZPBRBSWzP2t0KZEqAha6BZiifUN:JFvQePgZh96fUN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bce1f545f23f70935a2f758bd488eaaf_JaffaCakes118
Files
-
bce1f545f23f70935a2f758bd488eaaf_JaffaCakes118.exe windows:4 windows x86 arch:x86
ac65f8e90033dd042968c09aaae45cd8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
GetParent
DdeInitializeW
DdeCreateStringHandleW
DdeClientTransaction
DdeUninitialize
CharLowerW
IsCharAlphaW
DdeConnectList
DdeQueryNextServer
DdeQueryConvInfo
AllowSetForegroundWindow
IsIconic
ShowWindow
SetForegroundWindow
DdeFreeDataHandle
DdeFreeStringHandle
DdeDisconnectList
kernel32
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetStartupInfoA
ExitProcess
GlobalFree
GetLastError
GetCommandLineW
CreateProcessW
GlobalAlloc
CloseHandle
MultiByteToWideChar
GetACP
ReadFile
CreateFileW
lstrlenW
GetModuleHandleA
GetSystemTimeAsFileTime
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
shell32
ShellExecuteW
CommandLineToArgvW
ShellExecuteExW
shlwapi
AssocQueryStringW
StrCmpIW
AssocQueryStringByKeyW
PathCreateFromUrlW
UrlIsW
StrCmpNIW
PathFindFileNameW
StrToIntExW
StrStrW
StrChrW
StrCmpW
PathFindExtensionW
wininet
GetUrlCacheEntryInfoW
CreateUrlCacheEntryW
urlmon
URLDownloadToFileW
msvcrt
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__dllonexit
_onexit
_controlfp
_c_exit
_exit
_XcptFilter
_ismbblead
_except_handler3
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE