msiloadr.pdb
Static task
static1
Behavioral task
behavioral1
Sample
bf22480d35d423b0dc756243f2050889_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
bf22480d35d423b0dc756243f2050889_JaffaCakes118
-
Size
176KB
-
MD5
bf22480d35d423b0dc756243f2050889
-
SHA1
edb1c9071c5625aef3ff6ed7c1233d833eb44fb0
-
SHA256
b6a2e0abf277752c94b727d98733653fc2d7f6954ef9e01f31f5be586cf36687
-
SHA512
6293f0ef3feee96eb5bec591eb0838636b33e33662c8d68ecb019c049253cb92d989c7b14a75a54f07121222d6ba2245724618fd52c8a58bbea62edca1cc4556
-
SSDEEP
3072:J9IoYcvZMJGo5LOtJasl9c6Sl7iYRISPvWaphCKWMWCeVFX6IG:dpo5qyCcJl3RIGhpYKe6IG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf22480d35d423b0dc756243f2050889_JaffaCakes118
Files
-
bf22480d35d423b0dc756243f2050889_JaffaCakes118.exe windows:4 windows x86 arch:x86
16565ac95a428f6ccd17d07d629c1a8c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
oleaut32
VarUI4FromStr
SysAllocStringLen
GetErrorInfo
SetErrorInfo
SysAllocString
SysFreeString
ole32
OleRun
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
kernel32
lstrcmpA
CloseHandle
CreateFileA
Sleep
SetLastError
GetTickCount
GetPrivateProfileStringA
GetModuleFileNameA
GetExitCodeProcess
CreateProcessA
FreeLibrary
LoadLibraryA
GetSystemDirectoryA
WideCharToMultiByte
lstrlenW
IsBadReadPtr
GetProcAddress
WriteFile
ReadFile
DeleteFileW
SetErrorMode
LoadLibraryExA
MultiByteToWideChar
LoadResource
SizeofResource
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
lstrlenA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
GetModuleHandleA
FindResourceA
GetUserDefaultLCID
GetEnvironmentVariableA
GetVersion
CreateFileW
FindResourceW
GlobalAlloc
GetModuleFileNameW
GetTempFileNameW
GetTempPathW
LoadLibraryExW
GetLocaleInfoA
InterlockedExchange
LocalFree
GetTempFileNameA
GetTempPathA
GlobalFree
CreateMutexA
GetLastError
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExA
GetThreadLocale
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetUnhandledExceptionFilter
GetCPInfo
GetOEMCP
HeapSize
IsBadWritePtr
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
TlsAlloc
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
GetCurrentProcess
TerminateProcess
HeapReAlloc
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapAlloc
RtlUnwind
HeapFree
ExitProcess
GetCommandLineA
GetStartupInfoA
GetACP
FlushFileBuffers
SetFilePointer
IsBadCodePtr
user32
LoadStringA
MessageBoxA
MsgWaitForMultipleObjects
PeekMessageA
TranslateMessage
DispatchMessageA
CharNextA
shell32
ShellExecuteA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyA
QueryServiceStatus
ControlService
OpenServiceA
OpenSCManagerA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyExA
RegDeleteValueA
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE